Azure Backup vault

What it is

An Azure Backup vault is an Azure resource that stores and manages backup data for certain newer Azure Backup workloads. It contains backup instances and jobs and uses Azure RBAC to control backup and restore access. It is distinct from a Recovery Services vault.

Why it exists

Azure Backup supports more than one kind of workload and vault. The correct vault is the administrative home for the selected workload’s backup instances, recovery points, policies, monitoring, and restores.

Key ideas

  • Choose the vault type the workload supports; a Backup vault and Recovery Services vault are not interchangeable containers.
  • A vault dashboard summarizes backup instances and backup or restore jobs. It is not the protected application itself.
  • Choose policy schedule and retention according to recovery requirements, then verify with a restore test.
  • Protect the vault as a critical recovery resource: use least-privilege roles, consider a resource lock for accidental management-plane deletion, and configure appropriate monitoring.

Northwind example

Northwind protects a supported database workload in a Backup vault. Priya can see backup-job failures through the vault and receives an alert through the monitoring setup. When the team needs a prior version of the database, it chooses a recovery point and runs a tested restore. Creating the vault did not create a backup by itself; protection, policy, successful jobs, and a viable restore are all separate steps.

azure-backup · recovery-services-vault · azure-backup-policy · backup-reports

📘 Source: Microsoft Learn — Manage Backup vaults