Prepare Microsoft Entra ID Account

To start using lifecycle policies for Azure storage accounts, you need an Microsoft Entra ID user account.

1. Go to the Azure Portal.
2. Click on Microsoft Entra ID.

3. Click on Users
4. You can either create an entirely new user account or use the User principal name of an existing account to create an administrator account in Management Console and then log in to Management Console with your Microsoft credentials.

Create New User on Azure Portal

1. Go to the Azure Portal.
2. Click on Microsoft Entra ID.

3. Click on Users
4. Click + New user and select one of the available options. This article describes the Create New User option.

5. Enter the required information and click Review + create.

6. Check the provided information and click Create.

7. When the created user appears in the user list, copy the User principal name of this user. You will need this data to create an administrator account in the Management Console.

Grant Required Permissions

To use the Azure storage account and manage the Lifecycle Rules Settings for it, you should grant the newly created user account or an existing account with Owner or Contributor permission to manage your Azure subscription:

• Owner. Users assigned the Owner role have full access to all resources and can manage policies, including creating, editing, and assigning policies.
• Contributor. Users assigned the Contributor role can create and manage all types of Azure resources, including Azure Policy definitions and assignments.

To grant the permission to manage your Azure subscription, perform the following steps:

1. Go to the Azure Portal.
2. Enter Subscriptions in the top search box to access your subscriptions.

3. Click on the required subscription name
4. Click on Access control (IAM) to assign a role to the selected or created account.

5. On the Role Assignment tab, click + Create.

6. On the Role tab, select Owner or Contributor role. Search for these roles on Privileged Administrator Roles.

7. In this example the Contributor role is selected. On the Members tab, select User, group and service principal radio button, and click + Select members to assign this role to the selected or created account.

8. Review and assign the role.

9. Once you can see the assigned role on Access control (IAM), you are ready to start using the selected or created account as an administrator to the Managed Backup Service Management Console or for lifecycle policy management.