Understand Azure Files data protection
Understand Azure Files data protection
Druva delivers 100% SaaS, true cloud-native protection for your SMB Azure file shares. This zero-overhead design immediately reduces complexity and hidden costs because all backup infrastructure is hosted and managed by Druva, outside of your Azure subscription.
No Infra/Egress Costs: The agentless design means zero VMs or software to manage, and all recovery operations are egress-free.
Ultimate Security: Backups are immutable and logically air-gapped, providing the strongest defense against ransomware and malicious deletion.
Complete Resilience: Supports operational, disaster, and cyber recovery with full share or granular file and directory restoration.
Simplified Management: Gain centralized policy, reporting, and alerting in a single dashboard for consistent governance across all file shares.
Pre-Flight Checks: Planning and set up on the Enterprise Workloads Management Console
Pre-Flight Checks: Planning and set up on the Enterprise Workloads Management Console
Plan and set up the Enterprise Workloads Management Console before onboarding your subscriptions.
Create and manage Administrators and Administrative Groups. Creating a new Administrative Group is recommended to enforce Separation of Duties (SoD) and define granular access control over the file share backup settings for governance.
Enable organizations. Alternatively, you may use the Default Organization.
Set up backup destination: Choose your primary Druva Cloud storage destination (available in Azure and AWS regions). Consider your Recovery Time Objectives (RTOs) when selecting a remote region or cloud.
For more information, see Quick reference guide to deploy Enterprise Workloads.
Onboard Azure Subscriptions
Onboard Azure Subscriptions
Perform these steps to integrate Azure and grant the necessary access.
Register Tenant: Onboard your Microsoft Entra ID Tenant in the Management Console. You may skip this step if the tenant where your Azure Files shares exist is already onboarded.
Grant Access and Authorize: Authorize Druva to configure your selected Azure subscriptions. This process creates necessary resources, including an eKey, role assignment, and primary/secondary Key Vaults, to secure your backups with customer-controlled keys.
Assign Control: Assign an administrative group to control which users can manage the protected subscriptions.
Automatic Discovery: Druva instantly scans your subscriptions and lists all storage accounts containing SMB Azure file shares available for protection.
Review Troubleshooting Azure onboarding issues if you encounter issues.
Watch a quick onboarding video to see how to add your Azure subscriptions.
Configure Azure Files for backup and run first backup
Configure Azure Files for backup and run first backup
Create Backup Policies: First, create one or more backup policies and define the desired retention settings (e.g., daily backups for 30 days, monthly for one year).
Configure Backup Settings: Apply the newly created policy to the discovered Azure Files shares within the console.
Run First Backup: Once configured, manually trigger your first backup. Druva will automatically run subsequent backups based on your defined policy.
RestoreAzure Files data
RestoreAzure Files data
On successful backup, you can perform a restore. Here are the options available for recovering files and directories after the first successful backup:
Granular Control: Restore files and directories from any point-in-time recovery point.
Restoration Options: Restore to the original location or to an alternate share you have pre-provisioned.
For detailed steps on data recovery, see Restore Azure Files.