Commvault reps, if you see this message, really hope you will consider this.
The reason for my wish, is that we are noticing more and more questions from customers about why they provide us with permissions in their environment.
“Because the backup service needs it” is no longer an acceptable reason for many.

I am guessing that they have an increased focus on security, but I have a feeling that audits are becoming more important for many of the customers. The auditor might want to know what an account or an azure app is using their given permissions for.

I wish for a place in the Commvault docs or somewhere on the site, where a customer or commserve admin can read about the reasons why an account or azure app needs all the different permissions in the different backup/restore scenarios.

There is a nice table for Exchange Online Azure apps here: “https://documentation.commvault.com/v11/essential/147825_application_permissions_for_azure_app_for_exchange_online.html”

Why not create a similar table for all services?

Just create a page called “Permissions overview for Commvault” or something.
The user can select a service, like MS365, VMWare, HyperV etc. and they can then see a nice table like the Exchange Online table, if the backup or restore require any service accounts, azure apps and the permissions they need, and why they need each permission.

All the best