The NetApp Cloud Control service provides secure backup and recovery of Microsoft Office 365 data.

The Cloud Control User Guide includes an overview and information on getting started, signing up, managing backups, managing restores, viewing data, managing services, managing role-based account access, and providing feedback.

What’s new in this release

The following new features and updates have been added to this release of Cloud Control.

April 2018

Cloud Control now supports shared mailboxes for Microsoft Office Exchange Online.
Shared mailboxes are discovered through the use of an automatically created service account. If you have not activated service for Microsoft Office Exchange Online prior to this update, the automatic service account for shared mailboxes is created by Cloud Control when you activate Microsoft Office Exchange Online. If your service for Microsoft Office Exchange Online is already activated, you must grant Cloud Control permission to create the automatic service account, so that your shared mailboxes can be discovered and backed up. Granting permissions to enable shared mailboxes

After your automatic service account is created, your shared mailboxes will be automatically discovered during the next scheduled synchronization of your user account. If you want your shared mailboxes discovered immediately, you can synchronize your user accounts immediately.

March 2018

The location in which you enter an activation code for a free trial was moved to the Add a Service Provider wizard:

Screenshot that shows where you enter an activation code in the Subscription page when Free Trial is selected.

February 2018

  • Filtering based on Template ID is now available for Microsoft SharePoint Online.
    Creating a user defined filter

  • You can now download the Cloud Control user account activity log to a .csv file.
    Downloading the activity log

  • Synchronization of user accounts, sites, and groups between Cloud Control and your service is now enabled by default.

  • Inclusion of backup version history is now enabled by default. The default number of versions is 20.
    Updating backup settings

January 2018

  • The activity log now displays the name of the user ID associated with each action performed inside Cloud Control.

  • You can now manually synchronize your user permissions with Azure Active Directory from within Cloud Control.

  • Microsoft Exchange Online now supports export to PST for restore at the folder level.

November 2017

  • Cloud Control now supports Azure Blob as an option for Cloud Control provided storage.

  • Cloud Control now supports Microsoft Office 365 Groups for backup and restore.
    Microsoft Exchange Online or Microsoft SharePoint Online must be activated before you can activate Microsoft Office 365 Groups. Microsoft Office 365 Groups can only be protected by the tier 3 backup policy.

  • Microsoft Exchange Online now supports export to PST for restore at the mailbox level.

October 2017

  • Rules can be created that allow you to automatically move users to a preselected backup tier based on predefined criteria.
    You can create rules for Microsoft Exchange Online and Microsoft OneDrive for Business. You cannot create rules for Microsoft SharePoint Online.
    Creating Rules

Cloud Control overview

Cloud Control is a secure, web-based, software-as-a-service (SaaS) offering that backs up your Microsoft Office 365 data to Amazon S3 storage, Microsoft Azure Blob storage, or StorageGRID Webscale object storage. Cloud Control provides encryption for data at rest and in flight.
CloudControl Overview EAP

Getting started with Cloud Control

  1. Decide what type of storage you want to use to back up your data.

  2. Gather pertinent information about the backup storage platform you choose.

  3. Create a Microsoft Office 365 service account with global administrator permissions, if you do not have one.

  4. Assign user permissions for your services to your Microsoft Office 365 service account.

  5. Sign up for Cloud Control using your Microsoft Office 365 service account or your NetApp SSO account.

  6. Move your unprotected data to a protected state.

  7. Perform an immediate backup, if needed.

Deciding what type of storage to use to back up your data

Cloud Control provides Amazon S3 storage and Azure Blob storage as options for backup. Cloud Control also enables you to Bring Your Own Storage (BYOS) to back up your data. If you choose to use storage provided by Cloud Control, you do not need to gather any information before signing up. If you choose the BYOS option, you must gather pertinent information about your storage before signing up.

Gathering information about your Cloud Control storage platform

You need the following information to set up your BYOS Amazon S3 storage, StorageGRID Webscale object storage, or Azure Blob storage.

  • Amazon S3
    If you are using the Amazon S3 bucket provided by Cloud Control, you do not need to gather this information. If you are using your own Amazon S3 bucket, you must gather the following information:

    • Bucket name

    • Region

    • Access key

    • Secret key

  • StorageGRID Webscale
    Cloud Control does not create the StorageGRID Webscale bucket. It must already exist.

    • Host/IP address
      You must have a public IP address and a domain name with a certificate, for example, webscale.netapp.com. You must also be using Transport Layer Security (TLS) protocol 1.2.

    • Port
      The open port should be 8082 or 443, whichever is configured.

    • Bucket name

    • Access key

    • Secret key

  • Azure Blob

    • Account name

    • Container name

    • Access point

    • Access key

Creating a new MS Office 365 service account with global administrator permissions

Creating a new Microsoft Office 365 service account with global administrator permissions is recommended when signing up for Cloud Control. However, creating a new account is not required. If you prefer, you can use your existing Microsoft Office 365 service account.

  1. Log in to your Office 365 Management portal using an account with administrative privileges.

  2. Click Users.
    users

  3. Select Active users, and then click Add a user.
    O365 AdminCenter

  4. Enter the details of the new service account.

    • First name

    • Last name

    • Display name

    • User name
      The user name is the name of the service account.
      new user

  5. Expand Roles, select Global administrator as the role, and then click Add.
    roles
    The service account details are sent to the administrator.

  6. Log in to your Office 365 Management Portal with the new account to activate it.

  7. Ensure that the service account includes licenses for Exchange Online and SharePoint Online, at a minimum.

    This is especially important if you restrict the individual licenses for the Global administrator role.

Assigning user permissions to your MS Office 365 service account

Before you sign up for Cloud Control, you must assign user permissions to your Microsoft Office 365 service account. The process you follow to assign user permissions depends on the Microsoft services (Exchange Online, SharePoint Online, OneDrive for Business) you are using with Cloud Control.

Assigning user permissions for Microsoft Exchange Online

If you plan to use Cloud Control with Microsoft Exchange Online, you must configure impersonation. Impersonation allows your Microsoft Office 365 service account to impersonate user accounts and access associated permissions.

To automatically configure impersonation, run MSDN PowerShell Commands.

To manually configure impersonation:

  1. Use Exchange Admin Center or an administrator account to log in to your Microsoft Office 365 service account.

  2. Select the Exchange tab.

  3. In the left navigation pane, under Dashboard, select Permissions.

  4. Click Admin roles.

  5. Double-click in the right pane to select Discovery management.

  6. Under Roles, click the + symbol.
    write scope

  7. Select ApplicationImpersonation from the drop-down menu.

  8. Click Add.

  9. Click OK.

  10. Verify that ApplicationImpersonation was added under Roles.

  11. Under Members, click the + symbol.
    members
    A new window appears

  12. Choose the user name.

  13. Click Add.

  14. Click OK.

  15. Verify that the user name appears in the Members section.

  16. Click Save.

Assigning user permissions for Microsoft OneDrive for Business

If you plan to use Cloud Control with Microsoft OneDrive for Business, you must assign eDiscovery permissions. This allows your Microsoft Office 365 service account to access the site.

After you add eDiscovery permissions, your service account is listed as an owner of all backed-up site collections. This does not change permissions or grant access that was not previously authorized.

You can assign user permissions manually or automatically. If you have a few users, manual assignment is recommended.

To manually assign permissions to each user account:

  1. Under the Admin tab, select SharePoint.

  2. Click User profiles.

  3. Under People, select Manage User Profiles.

  4. Search for the users that you want to configure.

  5. Scroll over the search results, and then select the down arrow for the user that you want to select.

  6. Select Manage Site Collection Owners.

  7. Under Site Collection Owners, add the appropriate administrator account.

  8. Click OK.

  9. To verify the permissions, select the down arrow and then select Manage Personal Site.
    The Microsoft Office 365 service account can now access the site.

To automatically assign permissions to each user account:

  1. Run the SharePoint Online Management Shell script.

  2. Log in to the Office 365 Management portal with your Microsoft Office 365 service account.
    Your Microsoft Office 365 account should have global administrator permissions.

  3. In the left navigation pane, click Admin centers > SharePoint.

  4. Click user profiles.

  5. Under My Site Settings, click Set up My Sites.

  6. Under My Site Secondary Admin, click Enable My Site secondary admin.

  7. In the Secondary admin field, type the name of your Microsoft Office 365 service account.

  8. Click OK.

Assigning user permissions for Microsoft SharePoint Online

If you plan to use Cloud Control with Microsoft SharePoint Online, you must add an administrator to the site collection administrator list. This allows your Microsoft Office 365 service account to access user account permissions.

Signing up for Cloud Control

You can sign up for Cloud Control with your Microsoft Office 365 service account or with your NetApp SSO account.

Signing up with a Microsoft Office 365 service account

  1. Enter the Cloud Control URL into your web browser:
    https://cloudcontrol.netapp.com

  2. Select your region.
    Your tenancy is created in the selected region. Your data will be stored in that datacenter location and cannot be changed later.

  3. Click Sign up at the bottom of the landing page.

  4. Accept the End-User License Agreement.

  5. Click Sign Up with Office 365.
    sign up 0365

  6. Enter the email address and password for your Microsoft Office 365 global administrator service account, and then click Sign in.
    A list of the permissions requested by Cloud Control is displayed.

  7. Click Accept.

  8. Enter the requested user information.

  9. Click Sign up.
    Your user name and a list of permissions given to Cloud Control is displayed.

  10. Click Next.
    A list of the available Microsoft Office 365 services is displayed.

  11. Select the Microsoft Office 365 services that you want to activate.

  12. Click Next.

  13. Select the subscription type.
    For the Free Trial, enter the activation code provided by your channel partner or sales representative, or obtained from a marketing representative through email.
    For a Licensed subscription, you must enter the requested information, and then validate the subscription.

  1. Click Next.

  2. Select your backup storage option.
    You can use storage provided by Cloud Control or the Bring Your Own Storage (BYOS) option.
    SettingupBackup EAP

    1. If you are using storage provided by Cloud Control:

      1. Click Cloud Control Provided Storage.

      2. Select the Amazon S3 or Azure Blob storage option.

      3. Click Next.

      4. Review your configuration, and then click Save.

    2. If you are using the BYOS option:

      1. Click Bring Your Own Storage (BYOS).

      2. Click your BYOS option.

      3. Enter the information you previously gathered for your BYOS option.

      4. Click Test Connection.

      5. Click Next.

      6. Review your configuration, and then click Save.

Signing up with a NetApp SSO account

  1. Enter the Cloud Control URL into your web browser:
    https://cloudcontrol.netapp.com

  2. Click Sign up at the bottom of the landing page.

  3. Accept the End-User License Agreement.

  4. Click Sign Up with NetApp SSO.
    sign up sso

  5. Enter your NetApp SSO and password, and then click LOGIN.

  6. Enter the requested user information, and then click Sign Up.

  7. Click the Services icon.
    bluecircle icon

  8. Click the Microsoft Office 365 icon to select the SaaS service.
    O365 icon

  9. Click Add Microsoft Office 365 Account.

  10. Enter the email address and password for your Microsoft Office 365 global administrator service account, and then click Sign in.
    A list of the permissions requested by Cloud Control is displayed.

  11. Click Accept.

  12. Click Next.
    A list of the available Microsoft Office 365 services is displayed.

  13. Select the Microsoft Office 365 services that you want to activate.

  14. Click Next.

  15. Select the subscription type.
    For the Free Trial, enter the activation code provided by your channel partner or sales representative, or obtained from a marketing representative through email.
    For a Licensed subscription, you must enter the requested information, and then validate the subscription.

  1. Click Next.

  2. Select your backup storage option.
    You can use storage provided by Cloud Control or the Bring Your Own Storage (BYOS) option.

    1. If you are using storage provided by Cloud Control:

      1. Click Cloud Control Provided Storage.

      2. Select the Amazon S3 or Azure Blob storage option.

      3. Click Next.

      4. Review your configuration, and then click Save.

    2. If you are using the BYOS option:

      1. Click Bring Your Own Storage (BYOS).

      2. Click your BYOS option.

      3. Enter the information you previously gathered for your BYOS option.

      4. Click Test Connection.

      5. Click Next.

      6. Review your configuration, and then click Save.

Moving unprotected data to a protected state

When you set up Cloud Control, by default, your data is unprotected. You must move your data from an unprotected state to one of the Cloud Control backup policy tiers for it to be scheduled for back up.

  1. From the Dashboard, select the service containing the unprotected data.

  2. Click view next to the number of unprotected mailboxes, MySites, sites or groups.

  3. Select the items that you want to protect.

  4. Click the Groups menu.
    groupsMenu

  5. Select the tier for the backup policy that you want to assign.
    See Backup policies for a description of the backup policy tiers.

  6. Click Apply.

Performing an immediate backup of a specific backup policy

When you set up Cloud Control, by default, all of your data is unprotected. After you move your data to a protected tier, you can perform an immediate backup of the tier to which you moved your data. This prevents your data from being at risk until the first scheduled backup occurs. If you can wait for the first scheduled backup, performing an immediate backup is not necessary.

You can perform an immediate backup any time you deem necessary for data protection. If you are running a trial version of Cloud Control, you can only perform three immediate backups per day, per service.

  1. From the Dashboard, select the service for which you want to perform an immediate backup.

  2. Under Backup Policies, click the tier that you want to back up.

  3. Click Backup Now.
    Backup Now
    A message is displayed indicating that the services under the selected tier will be placed in the job queue for immediate backup.

  4. Click Confirm.
    A message is displayed indicating that the backup job was created.

  5. Click View the job progress to monitor the progress of the backup.

Managing backups with Cloud Control

After you have completed the setup process for Cloud Control, you can use Cloud Control to manage backups of Microsoft Exchange Online, Microsoft OneDrive for Business, and Microsoft SharePoint Online.

Only the following templates are supported for Microsoft SharePoint Online backups.

  • STS#0 (Team Site)

  • BLOG#0 (Blog Site)

  • DEV#0 (Developer Site)

  • PROJECTSITE#0 (Project Site)

  • COMMUNITY#0 (Community Site)

  • BDR#0 (Document Center)

  • COMMUNITYPORTAL#0 (Community Portal)

  • ENTERWIKI#0 (Enterprise WIKI)

  • EHS#1 (Root site)

  • EHS#0 (Root site)

  • SITEPAGEPUBLISHING#0 (Communication site)

  • GROUP (Group site collection prefix)

Backup policies

Cloud Control has three predefined tiers of backup policies. These policy tiers vary in backup frequency and data retention period, depending upon whether you are using storage provided by Cloud Control or BYOS.

You can move data between the three policies, but you cannot create new policies or change the parameters of the predefined tiers.

Backup policies for Cloud Control provided storage

Backup policy Backup frequency Data retention period

Tier 1

Once every 12 hours

365 days

Tier 2

Once every 18 hours

365 days

Tier 3

Once every 24 hours

365 days

Backup policies for BYOS

Backup policy Backup frequency Data retention period

Tier 1

Once every 12 hours

Unlimited

Tier 2

Once every 18 hours

Unlimited

Tier 3

Once every 24 hours

Unlimited

Backup policies with an Active status are policies to which items have been assigned for backup. Backup policies with an Inactive status do not have items assigned for backup.

Changing backup policies

If you want to change the backup frequency of your data, you can assign the data to a different backup policy tier.

  1. From the Dashboard, select the service that you want to change.

  2. Click view next to the number of protected mailboxes, MySites, sites, or groups.

  3. Select the items for which you want to change the backup policy.

  4. Click the Groups menu.
    groupsMenu

  5. Select the new policy tier for the backup.
    Note: Only the tier 3 policy is available for Microsoft Office 365 groups.

  6. Click Apply.

Performing an immediate backup of a service

As needed, you can perform an immediate backup of any Microsoft Office 365 service.

  1. From the Dashboard, select the service for which you want to perform an immediate backup.

  2. Click view next to the number of protected mailboxes, MySites, sites, or groups.

  3. Select the items that you want to back up.

  4. Click Backup Now.
    Backup Now
    A message is displayed indicating that the selected services will be placed in the job queue for immediate backup.

  5. Click Confirm.
    A message is displayed indicating that the backup job was created.

  6. Click View the job progress to monitor the progress of the backup.

Canceling a job

If you have initiated an immediate backup or an immediate restore but need to cancel it before it is completed, you can do so.

  1. Click Jobs from the left navigation pane.
    JobsButton

  2. Select the Most Recent tab.

  3. Under Recent Running Jobs, click the job that you want to cancel.

  4. Click Cancel.
    The progress of the cancelled job is displayed under Recent Completed Jobs.

Managing restores with Cloud Control

You can perform high-level and granular-level restores with Cloud Control.

By default, only the most recent backup is available for restore. You can update your backup settings to maintain a specified number of backed-up versions of individual files. If you have more versions of a file than you have specified for backup, only the number of versions that you have specified is available for restore.

Performing a high-level service restore

You follow the same procedure to perform high-level restores of mailboxes for Microsoft Exchange Online, MySites for Microsoft OneDrive for Business, sites for Microsoft SharePoint Online, and for Microsoft Office 365 groups.

  1. From the Dashboard, select the service for which you need to perform a restore.

  2. Click view next to the number of protected mailboxes, MySites, sites, or groups.
    If you are restoring shared mailboxes for Micrsoft Exchange Online, click the Shared tab. If you are restoring mailboxes that are not shared, remain on the Regular tab.

  3. Select the items that you want to restore.

  4. Click Restore.
    Restore

  5. Select a restore option:

    • If you are restoring mailboxes for Microsoft Exchange Online or for Microsoft Office 365 Groups select one of the following options:

      • Restore to the same mailbox

      • Export to PST
        If you export to PST, you will receive a notification email with the location of the PST file when the export is completed. Note: This option is not available for Microsoft Office 365 Groups.

      • Restore to a different mailbox
        If you restore to a different mailbox, you must enter the destination mailbox in the search field. You can type in a portion of the destination email address in the search field to initiate an automatic search for matching destination mailboxes.

    • If you are restoring MySites for Microsoft OneDrive for Business, select one of the following options:

      • Restore to the same MySite

      • Restore to a different MySite
        If you restore to a different MySite, you must enter the destination MySite in the search field. You can type in a portion of the destination MySite in the search field to initiate an automatic search for matching destination MySites.

    • If you are restoring sites for Microsoft SharePoint Online, you can restore to the same site or to a different site. If you are restoring a site for Microsoft Office 365 Groups, you can only restore to the same site.

      • Restore to the same site

      • Restore to a different site
        If you restore to a different site, you must enter the destination site into the search field. You can type a portion of the destination site into the search field to initiate an automatic search for matching sites.

  6. Click Confirm.
    A message is displayed indicating that the restore job was created.

  7. Click View the job progress to monitor the progress of the restore.

Performing a granular-level restore for Microsoft Exchange Online

Within Microsoft Exchange Online, you can restore granular-level items for a single user, such as individual emails, tasks, contacts, and calendar events. You can also restore granular-level items for a Microsoft Office 365 group mailbox.

  1. From the Dashboard, click Microsoft Exchange Online.
    If you want to restore a Microsoft Office 365 group mailbox item, click Microsoft Office 365 Groups.

  2. Click view next to the number of protected mailboxes or groups.
    If you are restoring shared mailboxes for Micrsoft Exchange Online, click the Shared tab. If you are restoring mailboxes that are not shared, remain on the Regular tab.

  3. Click the mailbox for which you need to perform the granular-level restore.

  4. Restore an entire Microsoft Office Exchange category or restore a specific item within a category.
    For a Microsoft Office 365 Group mailbox, you only have the option to restore from the mail category or the calendar category.

    1. To restore an entire category:

      1. Select the category that you need to restore.

      2. Click Restore.

      3. Select a restore option.
        For Microsoft Office 365 Groups, you only have the option to restore to the same mailbox and you cannot replace the existing content. For Microsoft Exchange Online, you can restore to the same mailbox and replace the existing content or you can restore to a different mailbox.

        • Restore to the same mailbox
          If you restore to the same mailbox, by default, a restore folder with the current date and time stamp is created in the original content location containing the backup copy. If you select Replace the existing content, then your current data is completely replaced by the backup.

        • Export to PST
          You can select to include all the category subfolders.
          If you export to PST, you will receive a notification email with the location of the PST file when the export is completed. Note: This option is not available for Microsoft Office 365 Groups.

        • Restore to a different mailbox
          If you restore to a different mailbox, you must enter the destination mailbox in the search field. You can type in a portion of the destination email address in the search field to initiate an automatic search for matching destination mailboxes.

      4. Click Confirm.

      5. Click View the job progress to monitor the progress of the restore.

    2. To restore one or more specific items:

      1. Click the category (Mail, Tasks, Contacts, or Other) of the single items that you want to restore.

      2. Select the items that you want to restore.
        For mail, you can restore an entire folder or specific emails within the folder. To restore the entire folder, you select the folder. To restore individual emails, you select the folder containing the email, and then select the individual emails within the folder.

      3. Click Restore.
        Restore

      4. Select a restore option:
        For Microsoft Office 365 Groups, you only have the option to restore to the same mailbox and you cannot replace the existing content. For Microsoft Exchange Online, you can restore to the same mailbox and replace the existing content or you can restore to a different mailbox.

        • Restore to the same mailbox
          If you restore to the same mailbox, by default, a restore folder with the current date and time stamp is created in the original content location containing the backup copy. If you select Replace the existing content, then your current data is completely replaced by the backup.

        • Export to PST
          You can select to include all the category subfolders.
          If you export to PST, you will receive a notification email with the location of the PST file when the export is completed. Note: This option is not available for Microsoft Office 365 Groups.

        • Restore to a different mailbox
          If you restore to a different mailbox, you must enter the destination mailbox in the search field. You can type in a portion of the destination email address in the search field to initiate an automatic search for matching destination mailboxes.

      5. Click Confirm.
        A message is displayed indicating that the restore job was created.

      6. Click View the job progress to monitor the progress of the restore.

Performing a granular-level restore for Microsoft OneDrive for Business

Within Microsoft OneDrive for Business, you can restore granular-level items, such as individual folders or files, for a list or library.

  1. From the Dashboard, click Microsoft OneDrive for Business.

  2. Click view next to the number of protected MySites.

  3. Click the MySite for which you need to perform the granular-level restore.

  4. Restore a group of files or individual files.

    1. To restore a group of files:

      1. Select the group of files.

      2. Click Restore.
        Restore

      3. Select a restore option:

        • Restore to the same MySite

        • Restore to a different MySite
          If you restore to a different MySite, you must enter the destination MySite in the search field. You can type in a portion of the destination MySite in the search field to initiate an automatic search for matching destination MySites.

      4. Click Confirm.

      5. Click View the job progress to monitor the progress of the restore.

    2. To restore one or more individual file:

      1. Click the file group.

      2. Select the files that you want to restore.
        You can restore an entire folder, or specific files within the folder. To restore an entire folder, you select the folder. To restore a specific file, you select the folder containing the file, and then select the individual file within the folder.

      3. Click Restore.
        Restore

      4. Select a restore option.
        You can choose one of the following restore options:

        • Restore to the same MySite
          If you are restoring individual files to the same MySite, by default, a restore folder with the current date and time stamp is created in the original content location containing the backup copy.
          If you select Replace the existing content, then your current data is completely replaced by the backup.

        • Restore to another MySite
          If you restore to another MySite, you must enter the destination MySite in the search field. You can type in a portion of the destination MySite in the search field to initiate an automatic search for matching destination MySites.

      5. Click Confirm.
        A message is displayed indicating that the restore job was created.

      6. Click View the job progress to monitor the progress of the restore.

Performing a granular-level restore for Microsoft SharePoint Online

Within Microsoft SharePoint Online, you can restore granular-level items for a single user, such as individual folders or files. You can also restore granular-level items for a Microsoft Office 365 group site.

  1. From the Dashboard, click Microsoft SharePoint Online.
    If you want to restore a Microsoft Office 365 group site, click Microsoft Office 365 Groups.

  2. Click view next to the number of protected sites or groups.

  3. Click the site for which you need to perform the granular-level restore.

  4. Restore an entire Microsoft SharePoint Online content category or restore a specific content item.

    1. To restore an entire content category:

      1. Select the category that you need to restore.

      2. Click Restore.
        Restore

      3. Select a restore option:
        For Microsoft Office 365 Groups, you only have the option to restore to the same site. For Microsoft SharePoint Online, you can restore to the same site or to another site.

        • Restore to the same site
          If you restore to the same site, then by default, a restore folder with the current date and time stamp is created in the original file location containing the backup copy. If you select the Overwrite with merge option, no restore folder is created. If the version of the backup file and the current file match, the backup is restored to the original location. Any new content in the destination is ignored and unaffected. For example, if the backup contains File1 version5 and the destination contains File1 version 6, a restore with the Overwrite with Merge option selected fails. If you select the Replace the existing content option, the current version of the data is completely replaced with the backup copy.

        • Restore to another site
          If you restore to another site, you must enter the destination site in the search field. You can type a portion of the site in the search field to initiate an automatic search for matching sites.

      4. Click Confirm.
        A message is displayed indicating that the restore job was created.

      5. Click View the job progress to monitor the progress of the restore.

    2. To restore to one or more specific content items:

      1. Click the content category of the single items that you want to restore.

      2. Select the items that you want to restore:

        • If you want to restore the most recent version of the item, click Restore.
          Restore

          • Select a restore option:
            For Microsoft Office 365 Groups, you only have the option to restore to the same site. For Microsoft SharePoint Online, you can restore to the same site or to another site.

            • Restore to the same site
              If you restore to the same site, then by default, a restore folder with the current date and time stamp is created in the original file location containing the backup copy. If you select the Overwrite with merge option, no restore folder is created. If the version of the backup file and the current file match, the backup is restored to the original location. Any new content in the destination is ignored and unaffected. For example, if the backup contains File1 version5 and the destination contains File1 version 6, a restore with the Overwrite with Merge option selected fails. If you select the Replace the existing content option, the current version of the data is completely replaced with the backup copy.

            • Restore to another site
              If you restore to another site, you must enter the destination site in the search field. You can type a portion of the site in the search field to initiate an automatic search for matching sites.

        • If you want to restore a previous version of the item, click Show versions.

          • Select the version that you want to restore.

          • Click Restore.
            Restore
            You can restore to the same site or to a different site. If you restore to another site, you must enter the destination site in the search field. You can type a portion of the site in the search field to initiate an automatic search for matching sites.

        • Click Confirm.
          A message is displayed indicating that the restore job was created.

        • Click View the job progress to monitor the progress of the restore.

Restoring from a previous backup

By default, only your most recent backup is available for restore. Note: Previous backups of Microsoft Office 365 group sites are not available for restore.

  1. From the Dashboard, select the service for which you need to perform a restore.

  2. Click view next to the number of protected mailboxes, MySites, or sites.
    If you are restoring shared mailboxes for Micrsoft Exchange Online, click the Shared tab. If you are restoring mailboxes that are not shared, remain on the Regular tab.

  3. Click the item that you want to restore.

  4. Click View Previous Backup.
    A calendar is displayed. Dates for which backups are available are indicated by a green circle.

  5. If you want to display all the items backed up over a select number of days, click Show Selected Backups and select one of the pre-defined number of days from the drop-down menu.

  6. Otherwise, click the date of the backup that you want to restore and then select the specific backup.

  7. Select the items that you want to restore.

  8. Click Restore.
    Restore

  9. Select a restore option:

    • If you are restoring mailboxes for Microsoft Exchange Online or a mailbox for a Microsoft Office 365 Group, select one of the following options:

      • Restore to the same mailbox
        If you are restoring to the same mailbox, by default, a restore folder with the current date and time stamp is created in the original content location containing the backup copy. If you select Replace the existing content, then your current data is completely replaced by the backup.

      • Restore to a different mailbox
        If you restore to a different mailbox, you must enter the destination mailbox in the search field. You can type in a portion of the destination email address in the search field to initiate an automatic search for matching destination mailboxes.

    • If you are restoring MySites for Microsoft OneDrive for Business, select one of the following options:

      • Restore to the same MySite
        If you are restoring individual files to the same MySite, by default, a restore folder with the current date and time stamp is created in the original content location containing the backup copy. If you select Replace the existing content, then your current data is completely replaced by the backup. If you are restoring an entire folder, the option to Replace the existing content is not available.

      • Restore to a different MySite
        If you restore to a different MySite, you must enter the destination MySite in the search field. You can type in a portion of the destination MySite in the search field to initiate an automatic search for matching destination MySites.

    • If you are restoring sites for Microsoft SharePoint Online, you can restore to the same site or to a different site. If you are restoring a Microsoft Office 365 group site, you can only restore to the same site.

      • Restore to the same site
        If you restore to the same site, then by default, a restore folder with the current date and time stamp is created in the original file location containing the backup copy. If you select the Overwrite with merge option, no restore folder is created. If the version of the backup file and the current file match, the backup is restored to the original location. Any new content in the destination is ignored and unaffected. For example, if the backup contains File1 version5 and the destination contains File1 version 6, a restore with the Overwrite with Merge option selected fails. If you select the Replace the existing content option, the current version of the data is completely replaced with the backup copy.

      • Restore to a different site
        If you restore to a different site, you must enter the destination site into the search field. You can type a portion of the destination site into the search field to initiate an automatic search for matching sites.

  10. Click Confirm.
    A message is displayed indicating that the restore job is created.

  11. Click View the job progress to monitor the progress of the restore.

Updating backup settings

You can update your backup settings to control various backup options. Available backup settings vary based on service.

Backup setting Description Enabled Available in…​

Auto Sync

Enables the automatic scheduled synchronization of newly added or deleted users, OneDrives, or site collections once every 24 hours.

By default

Microsoft Exchange Online
Microsoft SharePoint Online
Microsoft OneDrive for Business
Microsoft Office 365 Groups

Enable Restore of Recoverable Items

Enables the user to restore Microsoft Exchange recoverable items

Manually

Microsoft Exchange Online

Enable Backup of Recoverable Items

Enables the backup of Microsoft Exchange recoverable items. Only the tier 1 backup policy allows for the backup of recoverable items.

Manually

Microsoft Exchange Online

Include Workflows

Includes workflows in the backup

Manually

Microsoft SharePoint Online
Microsoft Office 365 Groups

Include List Views

Includes view of list in backup

Manually

Microsoft SharePoint Online
Microsoft Office 365 Groups

Include Version History

Enables maintenance of multiple file versions in the backup.
Note: This setting only applies to individual files. It does not apply to entire folders, tiers, or services.

By default

Microsoft SharePoint Online
Microsoft OneDrive for Business
Microsoft Office 365 Groups

Number of Versions

Sets the number of backup file versions to maintain.
By default, the latest version is automatically backed up, even if this setting is not enabled.

Set to 20 by default

Microsoft SharePoint Online
Microsoft OneDrive for Business
Microsoft Office 365 Groups

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Click Settings next to the service that you need to update.
    settings
    A list of your backup settings available for the selected service is displayed.

  4. Select the desired backup settings.

  5. Click Confirm.

Viewing data with Cloud Control

You can view information within Cloud Control in various ways.

You can filter data for specific results, use inline search to find what you need, and view the Cloud Control activity log for a list of all Cloud Control activity.

Creating a user defined filter

You can filter the view of your mailboxes, sites, or MySites to only show results that fit specific criteria. For example, you can set your filters to only see mailboxes in a certain country and a certain department within that country.

  1. From the Dashboard, select the service that you want to view.

  2. Click view next to the number of protected or unprotected mailboxes, MySites, or sites.
    The currently applied filters are listed under the Filter icon.

  3. Click Filter.
    Filter

  4. In the first drop-down menu, select the filter of your choice.
    For Microsoft SharePoint Online, you can filter by Template ID. You can enter the Template ID to search for it, or select it from the dropdown menu.
    For all other services, you can filter by group, country, office, department, or title. The second drop-down menu is populated with selections based on the filter you select. For example, if you select Group as your first filter, you can select one of the backup policy group tiers as your secondary filter.
    SelectFilter

  5. In the second drop down menu, select the secondary filter of your choice.
    SelectFilter2

  6. If you want to add more filters, click Add Filter.

  7. Click Apply Filter.
    Filter results are displayed.

Performing a search inside Microsoft Exchange Online

You can perform an inline search within an individual mailbox for specific content. This also applies to mailboxes that are part of an Office 365 Group.

  1. From the Dashboard, click Microsoft Exchange Online.

  2. Click view next to the number of protected mailboxes.

  3. Double-click the email address for which you need to perform the search.

  4. Click the category (Mail, Tasks, Contacts, Calendar, or Other) that you need to search.

  5. Type a search string in the search field.
    The search is automatically performed and results are displayed after the search string is entered.

Performing a search inside Microsoft OneDrive for Business

You can perform an inline search within an individual MySite for specific content.

  1. From the Dashboard, click Microsoft OneDrive for Business.

  2. Click view next to the number of protected MySites.

  3. Click the MySite in which you need to perform the search.

  4. Click the files that you need to search.

  5. Type a search string in the search field.
    The search is automatically performed and results are displayed after the search string is entered.

Performing a search inside Microsoft SharePoint Online

You can perform an inline search within an individual MySite for specific content. This also applies to sites that are part of an Office 365 Group.

  1. From the Dashboard, click Microsoft SharePoint Online.

  2. Click view next to the number of protected sites.

  3. Click the site in which you need to perform the search.

  4. Click the content category that you need to search.

  5. Type the search string in the search field.
    The search is automatically performed and results are displayed after the search string is entered.

Viewing Job History

Cloud Control stores a log of all jobs that includes the job type, service, start time, end time, and completion status.

  1. Click Reporting on the left navigation pane.
    reporting

  2. Click the Job History tab.
    A list of all Cloud Control jobs is displayed.

  3. To filter the results, click Filter.

  4. In the first drop-down menu, select a filter.
    You can filter by policy, service, or type. If you select policy, the second drop-down menu is populated with backup tiers. If you select service, the second drop-down menu is populated with Cloud Control Services. If you select type, the second drop-down menu is populated with Cloud Control job types, such as restore and backup.

  5. In the second drop-down menu, select the specific policy, service, or type you for which you want to see related activity.

  6. If you want to add more filters, click Add Filter.

  7. Click Apply Filter.
    applyFilter
    Filter results are displayed.

  8. Click any job to expand the view for additional job details.

Viewing the Activity Log

Cloud Control stores a log of all activity that occurs inside Cloud Control. The log contains the date of each action performed along with the name of the user who performed the action. You can filter the activity log by service and event. For example, if you need to see all of the restore operations that have occurred for Microsoft Exchange Online, you can filter the activity log to view those specific results.

  1. Click Reporting on the left navigation pane.
    reporting

  2. Click the Activity Log tab.
    A list of all Cloud Control activity is displayed.

  3. To filter the results, click Filter.

  4. In the first drop-down menu, select a filter.
    You can filter by service or event. If you select service, the second drop-down menu is populated with Cloud Control Services. If you select event, the second drop-down menu is populated with Cloud Control events, such as restore and backup.

  5. In the second drop-down menu, select the specific service or event you for which you want to see related activity.

  6. If you want to add more filters, click Add Filter.

  7. Click Apply Filter.
    applyFilter
    Filter results are displayed.

Downloading the Activity Log

Cloud Control stores a log of all activity that occurs inside Cloud Control. The log contains the date of each action performed along with the name of the user who performed the action. You can download the activity log to a .csv file.

  1. Click Reporting on the left navigation pane.
    reporting

  2. Click the Activity Log tab.
    A list of all Cloud Control activity is displayed.

  3. Click download.
    The activity log is downloaded as a .csv file.

Downloading a log of completed jobs

You can download an Excel spreadsheet of successfully completed jobs.

  1. Click Jobs from the left navigation pane
    JobsButton

  2. Click the recently completed job that you want to download.

  3. Click Successful under the number of successfully completed jobs.
    completedJobs

  4. Click Download in the top right.
    download
    The log is downloaded as an Excel spreadsheet.

Creating rules

Rules allow you to automatically move users to a preselected backup tier based on predefined criteria.

You can create rules for Microsoft Exchange Online and Microsoft OneDrive for Business. Rules for Microsoft Exchange Online are applied before rules for Microsoft OneDrive for Business. You cannot create rules for Microsoft SharePoint Online.

You must apply a user defined filter to your data before you can create a rule. Applied filters are displayed below the Filter icon. Cloud Control default filters appear in gray. User defined filters appear in light blue.
rules

  1. From the Dashboard, select the service for which you want to create rules.

  2. Click view next to the number of protected or unprotected mailboxes for Microsoft Exchange Online or MySites for Microsoft OneDrive for Business.

  3. Click Create Rule.
    If no user created filter is applied, createRule does not appear.

  4. Enter a name for the rule.

  5. For Destination Group, select the tier to which you want users who meet the rule’s criteria to be moved.

  6. Select Apply to existing items if you want the rule to be immediately applied to all unprotected items. If not selected, the rule is applied to newly discovered items and any unprotected items the next time new items are discovered.

Multiple rules can be created. The rules are applied in the order they appear in the Manage Rules list.
manageRules
You can click the upDownRulesIcon to move a rule up or down in the list.

Managing rules

  1. From the Dashboard, select the service for which you want to create rules.

  2. Click view next to the number of protected or unprotected mailboxes for Microsoft Exchange Online or MySites for Microsoft OneDrive for Business.

  3. Click Filter.
    filter

  4. Click Rules.
    The existing rules are displayed.

  5. Click Apply Now to apply the rule to existing unprotected items.

  6. Click delete to delete the rule.
    The status of the items to which the rule was previously applies is not changed when the rule is deleted.

Managing services

Within Cloud Control you can activate new services, deactivate existing services, synchronize your service account users, and grant permissions to service accounts.

Activating a service

If needed, you can activate one or more Cloud Control services. Microsoft Exchange Online or Microsoft SharePoint Online must be activated before you can activate Microsoft Office 365 Groups.

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Click Activate next to the service that you want to activate.

  4. Click Confirm.

Deactivating a service

If needed, you can deactivate one or more of your Cloud Control services. If you deactivate a service, all of the schedules associated with that service are removed and no further backup is performed. You can still view the last backup that occurred before deactivation and you can still perform restores.

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Click Deactivate next to the service that you want to deactivate.
    deactivate

  4. Click Confirm.

Managing service accounts

If needed, you can add permissions to a service account user. Service accounts are used to perform concurrent backups efficiently.

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Click the + icon next to Manage Service Accounts.

  4. Click Confirm to be redirected to the Microsoft Office 365 sign-in page to grant permissions.

Synchronizing user accounts, sites, and groups with Cloud Control

By default, your user accounts, sites, and groups are automatically synchronized with Cloud Control once every 24 hours. However, if you make changes and you want to synchronize Cloud Control with your service before the next scheduled Auto Sync, you can initiate an immediate synchronization.

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Click Sync Now next to the service that you want to synchronize.
    New users are discovered and added in an unprotected state. If you want newly discovered users to be backed up, you must change the backup policy of the users from unprotected to one of the predefined tier groups.

  4. Click Confirm.

  5. Click View the job progress to monitor the progress.
    When the job is complete, you can click the job under Recent Completed Jobs to view the number of users that were added or removed during the synchronization. Changes to user accounts are indicated as follows:

    • Rediscovered users indicates the number of unchanged user accounts.

    • Deactivated users indicates the number of deleted user accounts.

    • Newly added users indicates the number of new user accounts.

Synchronizing user permissions with Azure Active Directory

You can manually synchronize your user permissions with Azure Active Directory from within Cloud Control.

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Click Rediscover Permissions.
    If permissions for a services are discovered, the service is displayed with the option to active.

Adding a license

Education domains can have a license for faculty and a separate license for students.

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Under Subscription details, click bluecircle icon icon.

  4. Enter the license information.

  5. Click Validate Subscription.

  6. Click Next.

  7. Click Save.

Granting permissions to enable shared mailboxes

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Click Grant Consent.

  4. Select your tenant account.

  5. Accept the permissions.
    Your shared mailboxes will be discovered during the next scheduled Auto Sync.

Managing role-based account access

You can assign administrative roles to user accounts to grant administrative privileges to selected users for one or more services.

Assigning administrative roles to user accounts

You can assign the following roles to users:

  • Global Tenant: Grants administrative privileges to all services, storage target, and license updates (renewal/upgrade).

  • Exchange Administrator: Grants administrative privileges to Microsoft Exchange Online only. Other services cannot be viewed or modified.

  • OneDrive Administrator: Grants administrative privileges to Microsoft OneDrive for Business only. Other services cannot be viewed or modified.

  • SharePoint Administrator: Grants administrative privileges to Microsoft SharePoint Online only. Other services cannot be viewed or modified.

    1. Click your user ID in the top left of the screen.

    2. Select My Account from the drop-down menu.

    3. Click the User Management tab.

    4. Click the bluecircle icon icon.

    5. Click the drop-down menu to select the role.
      You can assign one or more roles to a user.

    6. Click Confirm.

Updating administrative roles assigned to user accounts

If an update is made to a user’s administrative roles, the user is automatically logged out of Cloud Control. When the user logs back in, administrative role updates are reflected in the user’s account.

  1. Click your user ID in the top left of the screen.

  2. Select My Account from the drop-down menu.

  3. Click the User Management tab.

  4. Click edit next to the user name that you want to update.

  5. Click the drop-down menu to select the role.
    You can assign one or more roles to a user.

  6. Click Confirm.

Deleting all administrative roles from a user account

If all administrative roles are deleted from a user’s account, the user is automatically logged out of Cloud Control.

  1. Click your user ID in the top left of the screen.

  2. Select My Account from the drop-down menu.

  3. Click the User Management tab.

  4. Click delete next to the user name that you want to remove.

  5. Click Yes.

Upgrading from a trial subscription

When you upgrade from a trial subscription to a licensed subscription, your trial data is only preserved if you do not change your backup storage destination.

If you change your backup storage destination when you upgrade, your trial data is not migrated to the new destination.

If the backup destination of your trial subscription is…​ And the backup destination of your licensed subscription is…​ Your trial data is…​

Amazon S3 provided by Cloud Control

Amazon S3 provided by Cloud Control

Preserved

Azure Blob provided by Cloud Control

Azure Blob provided by Cloud Control

Preserved

BYOS

The same BYOS target

Preserved

Amazon S3 provided by Cloud Control

BYOS

Not migrated

Azure Blob provided by Cloud Control

BYOS

Not migrated

BYOS

A different BYOS target

Not migrated

BYOS

Amazon S3 provided by Cloud Control

Not migrated

BYOS

Azure Blob provided by Cloud Control

Not migrated

  1. Click Services from the left navigation pane.
    services

  2. Click the Microsoft Office 365 settings icon.
    configureIcon

  3. Under Subscription details, click Upgrade.
    upgrade

  4. Select your upgrade option, and then click Next.
    If you are purchasing through AWS Marketplace, select AWS Marketplace. Otherwise, select NetApp License.

  5. If you selected NetApp License:

    1. Enter the license information, and then click Validate Subscription.
      A confirmation of your license information is displayed.

    2. Click Next.
      Your previous subscription storage information and your new subscription storage information is displayed.
      Depending upon the storage destination used during your trial license and your storage destination selected for your licensed subscription, you might be presented with the option to keep the same destination used during your trial.

      1. If you are presented with this option and you want to keep the same destination, click Next, and then Save.

      2. If you are presented with this option and you want to change the storage destination, select No.
        Note: If you change the destination of your storage, Cloud Control does not migrate the trial data to the new destination. You must agree to proceed.
        iAgree

        1. Select your new destination storage type, and then enter the required information.

        2. Click Test Connection.

        3. Click Next.

        4. Review your configuration, and then click Save.

  6. If you selected AWS Marketplace:
    NOTE: Licensed subscriptions through AWS marketplace can only use the Amazon S3 storage provided by Cloud Control. If you used a BYOS storage option for your trial subscription, your trial data is not migrated.

    1. Click the link to Go to the AWS Marketplace.

    2. Click Continue.
      continue

    3. Click Modify your current contract.
      modify current contract

    4. Enter the requested information to upgrade to the licensed subscription.

    5. Click the link to set up your account.
      You are redirected to the Cloud Control page.

    6. Sign in to Cloud Control with your Microsoft Office 365 account.

    7. Click the Microsoft Office 365 settings icon.
      configureIcon

    8. Under Subscription details, click Activate.
      activate
      If you used a BYOS option for your trial subscription a warning is displayed. Cloud Control does not migrate the trial data to the new destination. You must agree to proceed.
      iAgree
      NOTE: If you select to have fewer users in your licensed subscription than in your trial subscription, all user accounts are moved to the unprotected tier when the licensed subscription is activated. After activation, you must manually move the desired accounts into a protected tier.

    9. Click Save.

Providing feedback

Your feedback about the Cloud Control product helps us serve you better. You can provide feedback from inside Cloud Control.

  1. Click your user name in the top right of the screen.

  2. Select Feedback.

  3. Complete the short feedback survey.

  4. Click Submit.

If you want to be notified automatically when production-level documentation is released or important changes are made to existing production-level documents, follow Twitter account @NetAppDoc.

Where to get help and find more information

You can get help and find more information in the Cloud Control community forum and knowledge base articles.

These resources can be accessed inside Cloud Control through the Support link on the Cloud Control navigation menu.

You can also email the Cloud Control support team at Cloudcontrolsupport@netapp.com.

Copyright © 1994–2018 NetApp, Inc. All rights reserved. Printed in the U.S.

No part of this document covered by copyright may be reproduced in any form or by any means—graphic, electronic, or mechanical, including photocopying, recording, taping, or storage in an electronic retrieval system—without prior written permission of the copyright owner.

Software derived from copyrighted NetApp material is subject to the following license and disclaimer:

THIS SOFTWARE IS PROVIDED BY NETAPP "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WHICH ARE HEREBY DISCLAIMED. IN NO EVENT SHALL NETAPP BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

NetApp reserves the right to change any products described herein at any time, and without notice. NetApp assumes no responsibility or liability arising from the use of products described herein, except as expressly agreed to in writing by NetApp. The use or purchase of this product does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of NetApp.

The product described in this manual may be protected by one or more U.S. patents, foreign patents, or pending applications.

RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.277-7103 (October 1988) and FAR 52-227-19 (June 1987).

Trademark information

NetApp, the NetApp logo, Go Further, Faster, AltaVault, ASUP, AutoSupport, Campaign Express, Cloud ONTAP, Clustered Data ONTAP, Customer Fitness, Data ONTAP, DataMotion, Fitness, Flash Accel, Flash Cache, Flash Pool, FlashRay, FlexArray, FlexCache, FlexClone, FlexPod, FlexScale, FlexShare, FlexVol, FPolicy, GetSuccessful, LockVault, Manage ONTAP, Mars, MetroCluster, MultiStore, NetApp Insight, OnCommand, ONTAP, ONTAPI, RAID DP, RAID-TEC, SANtricity, SecureShare, Simplicity, Simulate ONTAP, Snap Creator, SnapCenter, SnapCopy, SnapDrive, SnapIntegrator, SnapLock, SnapManager, SnapMirror, SnapMover, SnapProtect, SnapRestore, Snapshot, SnapValidator, SnapVault, StorageGRID, Tech OnTap, Unbound Cloud, and WAFL and other names are trademarks or registered trademarks of NetApp, Inc., in the United States, and/or other countries. All other brands or products are trademarks or registered trademarks of their respective holders and should be treated as such. A current list of NetApp trademarks is available on the web.