In this article, we will review permission prerequisites that an account used for backup should meet.
Please note: All information in this article also applies to both Planner and Planner (basic plans) environments.
For Backup operations:
The connection account for Backup operations from Planner/Planner (basic plans) should meet the following requirements:
- The account should have access to all necessary existing Microsoft 365 groups, Planner Plans, and users.
- The account should be added as a member to the public and private groups and Plans that need to be backed up (only these groups and Plans will be available to select for the backup).
The connection account for Restore operations to Planner/Planner (basic plans) should meet the following requirements:
- The account should have access to all necessary existing Microsoft 365 groups, Planner Plans, and users.
- If the backup is performed to existing Microsoft 365 groups, the account should be added as a member or an owner to those groups. The account should be a member and an owner of the existing target Private groups.
- The Planner account should have an Exchange Online license to be able to add task Comments (if the backed up Plan tasks have Comments to restore).
In order to connect to Microsoft Planner for the first time, tenant Global Administrator consent is required to allow FluentPro Backup to access your Microsoft 365 tenant.
Admin consent should be granted only once before adding the first Planner/Planner (basic plans) connection account. Once the consent is granted, any user account credentials without admin permissions can be used for connecting to Planner.
Please refer to this article if you receive the 'Need admin approval' message when adding a Planner/Planner (basic plans) connection.
FluentPro Backup application for Planner/Planner Basic plans) backups will be added to Microsoft 365 tenant. For FluentPro Backup to back up and restore data using Microsoft Graph API, the administrator must grant the app the correct permissions via a consent process.
The following Microsoft Graph API permissions are required:
For the backup:
- Group.Read.All
- User.ReadBasic.All
- Directory.Read.All
FluentPro Backup will have the following permissions for reading data from Microsoft Planner/Planner (basic plans):
- Read data from existing Microsoft 365 groups such as basic information, email addresses, membership
- Read data from existing Plans in Microsoft Planner
- Read sites of Microsoft 365 groups, linked to Planner Plans (required for file attachments migration).
For the Restore:
- Group.ReadWrite.All
- Directory.Read.All
- Sites.ReadWrite.All
- User.ReadBasic.All
FluentPro Backup will have the following permissions for data backup to Microsoft Planner/Planner (basic plans):
- Create new and update Microsoft 365 groups (Write permissions)
- Create new Plans in Microsoft Planner (Write permissions)
- Read and update sites of Microsoft 365 groups, linked to Planner Plans (Write permissions, required for attachments migration).