Share via

Fix Azure backups?

Nick Bhagat 0 Reputation points
2025-08-18T14:08:11.8533333+00:00

Azure Backup Service does not have sufficient permissions to Key Vault for Backup of Encrypted Virtual Machines.

Azure Backup
Azure Backup
An Azure backup service that provides built-in management at scale.

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jose Benjamin Solis Nolasco 5,406 Reputation points
    2025-08-18T14:14:42.7166667+00:00

    Welcome to Microsoft Q&A

    I hope you are doing well,

    Please to archive what you are looking for read this official documentation from Microsoft https://learn.microsoft.com/en-us/azure/backup/backup-azure-encrypted-vm-troubleshoot

    Azure Backup uses the managed identity of the Recovery Services Vault to talk to Key Vault. That identity needs both Key and Secret permissions.

    In the Azure Portal:

    1. Go to the Key Vault → Access policies.
    2. Add Access Policy:
      • Configure from template: Azure Backup
      • This pre‑selects:
      • Key permissions: Get, List, Unwrap Key, Wrap Key, Encrypt, Decrypt, Backup, Restore
      • Secret permissions: Get, List, Backup, Restore
    3. Select principal: search for your Recovery Services Vault name and pick its managed identity.
    4. Save the policy.

    😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.