Back up Azure file shares
This article explains how to back up Azure file shares from the Azure portal.
In this article, you'll learn how to:
- Create a Recovery Services vault.
- Configure backup from the Recovery Services vault
- Configure backup from the file share pane
- Run an on-demand backup job to create a restore point
- Learn about the Azure file share snapshot-based backup solution.
- Ensure that the file share is present in one of the supported storage account types.
- Identify or create a Recovery Services vault in the same region and subscription as the storage account that hosts the file share.
Create a Recovery Services vault
A Recovery Services vault is a management entity that stores recovery points created over time and provides an interface to perform backup related operations. These include taking on-demand backups, performing restores, and creating backup policies.
To create a Recovery Services vault, follow these steps.
Sign in to your subscription in the Azure portal.
Search for Backup center in the Azure portal, and navigate to the Backup Center dashboard.
Select +Vault from the Overview tab.
Select Recovery Services vault and click Continue.
The Recovery Services vault dialog box opens. Provide values for the Name, Subscription, Resource group, and Location.
Name: Enter a friendly name to identify the vault. The name must be unique to the Azure subscription. Specify a name that has at least 2 but not more than 50 characters. The name must start with a letter and consist only of letters, numbers, and hyphens.
Subscription: Choose the subscription to use. If you're a member of only one subscription, you'll see that name. If you're not sure which subscription to use, use the default (suggested) subscription. There are multiple choices only if your work or school account is associated with more than one Azure subscription.
Resource group: Use an existing resource group or create a new one. To see the list of available resource groups in your subscription, select Use existing, and then select a resource from the drop-down list. To create a new resource group, select Create new and enter the name. For more information about resource groups, see Azure Resource Manager overview.
Location: Select the geographic region for the vault. To create a vault to protect any data source, the vault must be in the same region as the data source.
If you're not sure of the location of your data source, close the dialog box. Go to the list of your resources in the portal. If you have data sources in multiple regions, create a Recovery Services vault for each region. Create the vault in the first location before you create the vault for another location. There's no need to specify storage accounts to store the backup data. The Recovery Services vault and Azure Backup handle that automatically.
After providing the values, select Review + create.
When you're ready to create the Recovery Services vault, select Create.
It can take a while to create the Recovery Services vault. Monitor the status notifications in the Notifications area at the upper-right corner of the portal. After your vault is created, it's visible in the list of Recovery Services vaults. If you don't see your vault, select Refresh.
We highly recommend you review the default settings for Storage Replication type and Security settings before configuring backups in the vault. For more information, see the Set Storage redundancy section.
Configure backup from the Recovery Services vault
The following steps explain how you can configure backup for multiple file shares from the Recovery Services vault pane:
In the Azure portal, open the Recovery Services vault you want to use for configuring backup for the file share.
In the Recovery Services vault pane, select the +Backup from the menu on the top.
In the Backup Goal pane, set Where is your workload running? to Azure by selecting the Azure option from the drop-down list.
In What do you want to back up?, select Azure File Share from the drop-down list.
Select Backup to register the Azure file share extension in the vault.
After you select Backup, the Backup pane opens. To select the storage account hosting the file share that you want to protect, select the Select link text below the Storage Account textbox.
The Select Storage Account Pane opens on the right, listing a set of discovered supported storage accounts. They're either associated with this vault or present in the same region as the vault, but not yet associated to any Recovery Services vault.
From the list of discovered storage accounts, select an account, and select OK.
The next step is to select the file shares you want to back up. Select the Add button in the FileShares to Backup section.
The Select File Shares context pane opens on the right. Azure searches the storage account for file shares that can be backed up. If you recently added your file shares and don't see them in the list, allow some time for the file shares to appear.
From the Select File Shares list, select one or more of the file shares you want to back up. Select OK.
To choose a backup policy for your file share, you have three options:
Choose the default policy.
This option allows you to enable daily backup that will be retained for 30 days. If you don’t have an existing backup policy in the vault, the backup pane opens with the default policy settings. If you want to choose the default settings, you can directly select Enable backup.
Create a new policy
To create a new backup policy for your file share, select the link text below the drop-down list in the Backup Policy section.
The Backup Policy context pane opens on the right. Specify a policy name in the text box and choose the retention period according to your requirement. Only the daily retention option is enabled by default. If you want to have weekly, monthly, or yearly retention, select the corresponding checkbox and provide the desired retention value.
After specifying the retention values and a valid policy name, select OK.
Choose one of the existing backup policies
To choose one of the existing backup policies for configuring protection, select the desired policy from the Backup policy drop-down list.
Select Enable Backup to start protecting the file share.
After you set a backup policy, a snapshot of the file shares is taken at the scheduled time. The recovery point is also retained for the chosen period.
Azure Backup now supports policies with daily/weekly/monthly/yearly retention for Azure file share backup.
Configure backup from the file share pane
The following steps explain how you can configure backup for individual file shares from the respective file share pane:
In the Azure portal, open the storage account hosting the file share you want to back up.
Once in the storage account, select the tile labeled File shares. You can also navigate to File shares via the table of contents for the storage account.
In the file share listing, you should see all the file shares present in the storage account. Select the file share you want to back up.
Select Backup under the Operations section of the file share pane. The Configure backup pane will load on the right.
For the Recovery Services vault selection, do one of the following:
If you already have a vault, select the Select existing Recovery Services vault radio button, and choose one of the existing vaults from Vault Name drop down menu.
If you don't have a vault, select the Create new Recovery Services vault radio button. Specify a name for the vault. It's created in the same region as the file share. By default, the vault is created in the same resource group as the file share. If you want to choose a different resource group, select Create New link below the Resource Type drop down and specify a name for the resource group. Select OK to continue.
If the storage account is registered with a vault, or there are few protected shares within the storage account hosting the file share you're trying to protect, the Recovery Services vault name will be pre-populated and you won’t be allowed to edit it Learn more here.
For the Backup Policy selection, do one of the following:
Leave the default policy. It will schedule daily backups with a retention of 30 days.
Select an existing backup policy, if you have one, from the Backup Policy drop-down menu.
Create a new policy with daily/weekly/monthly/yearly retention according to your requirement.
Select the Create a new policy link text.
After specifying the retention values and a valid policy name, select OK.
Select Enable backup to start protecting the file share.
You can track the configuration progress in the portal notifications, or by monitoring the backup jobs under the vault you're using to protect the file share.
After the completion of the configure backup operation, select Backup under the Operations section of the file share pane. The context pane listing Vault Essentials will load on the right. From there, you can trigger on-demand backup and restore operations.
Run an on-demand backup job
Occasionally, you might want to generate a backup snapshot, or recovery point, outside of the times scheduled in the backup policy. A common reason to generate an on-demand backup is right after you've configured the backup policy. Based on the schedule in the backup policy, it might be hours or days until a snapshot is taken. To protect your data until the backup policy engages, initiate an on-demand backup. Creating an on-demand backup is often required before you make planned changes to your file shares.
From the Recovery Services vault
Open the Recovery Services vault you used to back up your file share. On the Overview pane, select Backup items under the Protected items section.
After you select Backup items, a new pane that lists all Backup Management Types appears next to the Overview pane.
From the Backup Management Type list, select Azure Storage (Azure Files). You'll see a list of all the file shares and the corresponding storage accounts backed up by using this vault.
From the list of Azure file shares, select the file share you want. The Backup Item details appear. On the Backup Item menu, select Backup now. Because this backup job is on demand, there's no retention policy associated with the recovery point.
The Backup Now pane opens. Specify the last day you want to retain the recovery point. You can have a maximum retention of 10 years for an on-demand backup.
Select OK to confirm the on-demand backup job that runs.
Monitor the portal notifications to keep a track of backup job run completion. You can monitor the job progress in the vault dashboard. Select Backup Jobs > In progress.
From the file share pane
Open the file share’s Overview pane for which you want to take an on-demand backup.
Select Backup under the Operation section. The context pane listing Vault Essentials will load on the right. Select Backup Now to take an on-demand backup.
The Backup Now pane opens. Specify the retention for the recovery point. You can have a maximum retention of 10 years for an on-demand backup.
Select OK to confirm.
Azure Backup locks the storage account when you configure protection for any file share in the corresponding account. This provides protection against accidental deletion of a storage account with backed up file shares.
Don't delete snapshots created by Azure Backup. Deleting snapshots can result in loss of recovery points and/or restore failures.
Don't remove the lock taken on the storage account by Azure Backup. If you delete the lock, your storage account will be prone to accidental deletion and if it's deleted, you'll lose your snapshots or backups.
Learn how to: