# Azure Backup

> Azure Backup protects Azure VMs with backup policies held in a Recovery Services vault

---

Site [llms.txt](/llms.txt)

---

Cloud Management Platform (CMP) imports those policies as protection plans and enables backup on a server under the policy you choose.

CMP reaches Azure Backup through an existing Azure resource handler and uses its credentials, so what that resource handler can do in your subscription is what Azure Backup can do.

## Prerequisites

- An [Azure resource handler](/docs/cmp/configure/infrastructure/resource-handlers/azure/) configured in CMP.
- A Recovery Services vault in that subscription, holding at least one backup policy for Azure virtual machines.
- The resource handler's account has permission to enable backup on a VM. See [Microsoft's Azure VM backup FAQ](https://learn.microsoft.com/en-us/azure/backup/backup-azure-vm-backup-faq).

## Set up the vault and policy in Azure

CMP only reads the vault and its policies, so create both in Azure first.

1. Create a [Recovery Services vault](https://learn.microsoft.com/en-us/azure/backup/backup-create-recovery-services-vault) in the subscription used by your Azure resource handler.
1. Create a [backup policy](https://learn.microsoft.com/en-us/azure/backup/backup-azure-arm-vms-prepare) in the vault with **Azure virtual machines** as the data source type, then set its backup schedule and retention range.

The retention range determines how long Azure keeps each recovery point and dictates how far back you can restore a server from CMP.

## Connect Azure Backup in CMP

Follow [Add a data protection plan](/docs/cmp/configure/integrations/data-backup-and-recovery/add-protection-plan/) and choose the Azure Backup tile. Two points are specific to Azure Backup:

- The form asks only for a **Name** and an **Azure Resource Handler**. There is no host, username, or password.
- **Import Protection Plans** lists the available backup policies. Wherever CMP says protection plan, read backup policy.

## Protect a server

Add the Data Protection Plan parameter where your Azure servers are ordered, as described in [Data protection plan parameters](/docs/cmp/configure/integrations/data-backup-and-recovery/protection-plan-parameters/). A blueprint can pin the plan to a value or leave it to be chosen at order time.

When the order runs, CMP enables backup on the new VM under your chosen policy. Azure then backs up the VM according to that policy's schedule, and the resulting recovery points appear in the server's **Data Protection** tab.

## Restore a server

See [Restore from snapshots](/docs/cmp/configure/integrations/data-backup-and-recovery/restore-from-snapshots/) for the procedure. Three points are specific to Azure Backup:

- The **Description** column shows the Azure recovery point name rather than the policy name.
- The restore does not create a CMP job. CMP sends the request and reports back; watch progress in Azure.
- A storage account in the same resource group as the vault is used to stage the restore; one is created if it doesn't exist.

<div class="alert alert-danger" role="alert">


The restore begins as soon as you select the restore icon.
</div>


## Related

- [Add a data protection plan](/docs/cmp/configure/integrations/data-backup-and-recovery/add-protection-plan/): The full connection and import procedure.
- [Data protection plan parameters](/docs/cmp/configure/integrations/data-backup-and-recovery/protection-plan-parameters/): Making policies selectable on an order form.
- [Azure](/docs/cmp/configure/infrastructure/resource-handlers/azure/): Configuring the resource handler that this connection depends on.