Safeguard in Azure Backup whereby critical backup operations only proceed once a role on a Resource Guard has been obtained; that guard is best kept in a different tenant.
Also called MUA, MUA.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Multi-user authorization in context, with comparison tables and the common traps.
Terms in this definition
- Azure Backup
Azure's backup service, which keeps recovery points, long-term retention included, in a Recovery Services vault. It restores data rather than failing workloads over, which is the job of Site Recovery.
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- Resource Guard
Keeps, in a resource of its own, the permissions demanded by multi-user authorisation before sensitive backup vault operations can go ahead; putting it in another subscription or tenant is recommended.
- Tenant
A trusted, dedicated Microsoft Entra ID instance that stores the users, groups and app registrations of one organisation. A subscription trusts only a single tenant, although a tenant can be trusted by several subscriptions.
Related terms
- Backup MUA Operator
To perform a backup operation that multi-user authorisation (MUA) protects, a user needs this role assigned on the relevant Resource Guard.
- MABS
Microsoft Azure Backup Server, installed on-premises to back up workloads both locally and to Azure. Multi-user authorisation (MUA) isn't available with it.