Backup Exchange Online Data using M365 Manager Plus

ManageEngine M365 Manager Plus allows you to backup Exchange Online data for an indefinite period of time, and restore data granularly or completely as and when required. After the initial complete backup, the product takes incremental backups to help save storage space. Mailbox data like emails, calendar entries, contacts, journals, notes, posts, and tasks can all be backed up using this option. With M365 Manager Plus, you can view history of the backup, restoration operations and get information about various versions of backup. This section discusses:

1. Backup Settings
2. Restoration
3. Operation Summary

Backup settings

Creating a backup schedule

To create a new backup schedule for your Exchange Online tenants:

1. Log in to M365 Manager Plus and click the Auditing & Monitoring tab.
2. Navigate to Backup > Exchange > Backup Settings.
3. Click the Create Backup option in the top-right corner.
4. Select the Microsoft 365 Tenant from the drop-down option.
5. Provide a Name for the backup schedule, and choose specific Domains if you wish to.
6. Select the mailboxes that you wish to back up by clicking the icon in the Select Mailboxes field.
Note: You can back up a mailbox only if it has an active Microsoft 365 License.
7. If you want to exclude certain mailbox folders, like junk or spam, choose these folders from the Mailbox Folders to Exclude drop-down option.
8. Select the desired Frequency (daily, weekly, or monthly) for running the schedule.
9. In the Retention Period field, enter the number of days, months, or years for which Exchange Online backups should be stored. Backups older than the specified age will be discarded.
Note: If you've set the retention period to be 30 days, when the backup schedule runs on the 31st day, the backups taken on the first day will be discarded. You can choose to backup forever, in which case backups will not be discarded.To learn more about the retention period, refer to this page.
10. If you would like to secure the backed up data, choose the Encrypt backup data option and enter the Encryption key.
11. You can archive the backed up items as PST files after their retention period is over by choosing the Enable archive settings option. Provide a suitable storage location for the PST files in the Archive path field as in the image below.
Note: If you wish to add an additional layer of security for your PST, select Secure archived PST with a password, and provide a password.
12. Click Save to save the schedule. The back up will run at the specified time.
13. Click Save & Run to save the schedule, and initiate the immediate start of the first backup.
Note: The list of all configured schedules will be displayed under the Backup Settings page. The status of the last backup can be viewed by clicking on the View Details option corresponding to a particular schedule.

Editing the backup schedule

To edit the backup schedule:

1. Go to the Backup tab.
2. Navigate to Backup > Exchange > Backup Settings.
3. Click the icon under the Actions column, corresponding to the backup schedule you wish to edit.
4. Make changes to the required fields, and click on Update.

Enabling/disabling the backup schedule

1. Go to the Backup tab.
2. Navigate to Backup > Exchange > Backup Settings.
3. Click the and icons under the Actions column corresponding to the backup schedule that you wish to disable or enable, and click OK.

Manually triggering a backup

1. Go to the Backup tab.
2. Navigate to Backup > Exchange > Backup Settings.
3. Click the icon under the Actions column corresponding to the backup schedule to run a backup instantly.

Deleting the backup schedule

1. Go to the Backup tab.
2. Navigate to Backup > Exchange > Backup Settings.
3. Click the icon under the Actions column corresponding to the backup schedule you wish to delete, tick the Permanently delete backup data checkbox, and click OK.

Restoration

This part will explain how you can restore entire mailboxes, or individual mailbox folders from a backup, and export mailbox backups as PST files. To restore a backed up mailbox:

1. Log in to M365 Manager Plus and click the Auditing & Monitoring tab.
2. Navigate to Backup > Exchange > Restore.
3. Select Microsoft 365 Tenant from the drop-down option.
4. Choose one or multiple backups that you would like to restore from the list displayed. Click on the Review and Restore option.
5. Once you click on the option, the Restore window opens where you can choose specific folders and mailboxes from the list displayed on the left side. Click Restore.
6. Next, a Restore wizard will be displayed, as shown in the image below.
• Click on Next after you confirm your selection.
• Provide a suitable location to save the restored files, and click next.
• Choose if you want to restore only the changed or missing items, and provide a Name for the restored file.
• Click Restore.
7. You can also choose to save the restored files in PST format, protected by a password, by clicking on the Export option in the bottom.
• Provide a suitable path and name for restored files.
• To secure the PST file, choose Secure PST with a password option, and provide a password under the Password and Confirm password fields.
• Click Export.

Operation summary

This tab lists all the restore and export operations carried out using M365 Manager Plus. To view this summary:

1. Log in to M365 Manager Plus and click the Auditing & Monitoring tab.
2. Navigate to Backup > Exchange > Operation Summary.
3. Select Microsoft 365 Tenant from the drop-down option.
4. Navigate between the Restore and Export tabs to check the status and other information about specific operations.

ApplicationImpersonation role

While using the Microsoft 365 backup add-on in M365 Manager Plus, your service user account must have the ApplicationImpersonation role to perform the data backup process. By default, no groups or users have the ApplicationImpersonation role in Microsoft 365. It must be manually provided to the service user account via the Microsoft 365 admin center or PowerShell.

Using Microsoft 365 admin center:

1. Log in to the Microsoft 365 portal using a global administrator account.
2. Click the Admin icon on the left pane.
3. In the Microsoft 365 admin center window, go to Admin centers > Exchange.
4. Navigate to Permissions > Admin Roles.
5. Click the icon to add a new role.
6. Enter a suitable Name and Description for the role.
7. Under Roles, click on the + icon and choose ApplicationImpersonation > Add > OK.
8. Under Members, click the icon to add a new member to the role group.
9. Click Add > OK.
10. Click Save.

Using PowerShell cmdlets:

1. Log in to Microsoft 365 via Windows PowerShell.
2. Use the below PowerShell cmdlet to apply the ApplicationImpersonation role to the account used for backing up data:
   New-ManagementRoleAssignment -Role "ApplicationImpersonation" –User <user account name>