-
Title
How to use a SAS connection string instead of a connection string -
Description
How to use a SAS connection string or a connection string for a new Azure storage container. -
Resolution
-
To register a cloud storage in Recovery Manager for Active Directory using account level SAS URI, specify the account level SAS URI in the field Connection String or Shared Access Signature URI. The connection string will be protected and will not be displayed.
To retrieve your Azure® storage account connection string using account level SAS URI:
-
Log in to the Azure® portal.
-
Select your Storage account and navigate to Shared Access Signature under the Security + networking section.
-
Select all Allowed services.
-
Select all Allowed resource types.
-
Under Allowed permissions select Read, Write and List.
-
Optional to enable Blob versioning permissions (not required for storage upload).
-
Optional to enable Allowed blob index permissions (not required for storage upload)
-
Ensure the Start and expiry date/time is set to something other that the default 8 hours or your backups will fail due to the Blob service SAS URL expiring.
-
Click Generate SAS and connection string.
-
Copy the Blob service SAS URL.
-
In the Recovery Manager for Active Directory console, paste the Blob service SAS URL in the Connection String or Shared Access Signature URI.
-
-
To register a cloud storage in Recovery Manager for Active Directory using container level SAS URI, specify the container level SAS URI string in the field Connection String or Shared Access Signature URI. The connection string will be protected and will not be displayed.
To retrieve your Azure® storage account connection string using container level SAS URI:
-
Log in to the Azure® portal.
-
Select your Storage Account and select Containers under the Data Storage Section.
-
Select the Container you require the container level SAS URI string for.
-
Navigate to Shared access tokens under Settings.
-
Select Read, Write and List permissions under the Permissions drop-down.
-
Ensure the Start and expiry date/time is set to something other that the default 8 hours or your backups will fail due to the Blob SAS URL expiring.
-
Click on the Generate SAS Token and URL button and copy the Blob SAS URL.
-
In the Recovery Manager for Active Directory console, paste the Blob SAS URL in the Connection String or Shared Access Signature URI.
-
-