External Replication is a feature on the Egnyte Platform that allows the users to easily replicate their Egnyte data to a third-party cloud. Egnyte now introduces the ability to add Microsoft Azure as a destination for external replication.
External Replication is available as a standalone add-on for Enterprise Lite, Enterprise, Essentials, Elite, and Ultimate plans. Contact your account manager or Egnyte Sales team to add this feature.
Steps to Configure Azure Blob Storage for External Replication
- In the Azure portal, navigate to Storage Accounts.
- Select the storage account, and then copy the Subscription ID from the Essentials section. This will be required later for configuration.
The Storage Account’s permissions are contained by its corresponding Resource Account. - Go back to Home -> Storage Accounts. On the page that opens up, the Resource group will be available containing the Storage Account.
- In order to give a user permission to access the Storage Account, navigate to Home -> Resource groups -> select the resource group that the storage account is a part of. Now, click Access Control (IAM) and select Add under Create a custom role.
-
In the custom role configuration, create a role called External Replication, copy the following code and paste it in the JSON tab. Replace the highlighted portion with the Subscription ID copied earlier and storage account name respectively.
{
"properties": {
"roleName": "External Replication",
"description": "",
"assignableScopes": [
"/subscriptions/replace with Subscription ID/providers/Microsoft.Storage/storageAccounts/replace with storage account name"
],
"permissions": [
{
"actions": [
"Microsoft.Storage/storageAccounts/read",
"Microsoft.Storage/storageAccounts/blobServices/containers/read",
"Microsoft.Storage/storageAccounts/blobServices/containers/write",
"Microsoft.Storage/storageAccounts/blobServices/containers/delete",
"Microsoft.Storage/storageAccounts/listkeys/action"
],
"notActions": [],
"dataActions": [
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete",
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read",
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write",
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action",
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action"
],
"notDataActions": []
}
]
}
}
- Navigate to Review + Create -> Create.
- Navigate back to Home -> Storage Accounts -> click on the specific storage account -> Access Control (IAM) page. Assign access by clicking Add role assignment.
- Search the role name External Replication, click the role -> Next.
- Choose Managed Identity in the Assign access to radio group.
- Click on Review + Assign.
The Azure storage account will be ready for external replication.