An Azure backup service that provides built-in management at scale.
Hello MichaelBroadhead-2136
Based on the details you’ve shared, this file share is currently protected using Snapshot‑tier backups only, not Vault‑Standard (vaulted) protection.
- The Backup policy for the file share shows Backup tier: Snapshot.
- Under Recovery Services vault > Backup Items > Azure Storage > File Share, all recovery points list Recovery type: Snapshot.
- This behavior indicates that Azure Backup is taking file share snapshots that remain in the same storage account. The Recovery Services vault is used only to orchestrate schedules, retention, and job tracking, not to store the backup data itself.
With Snapshot‑tier protection, there is no offsite copy of data stored in the vault. If the storage account is deleted or compromised, the snapshots are also lost. This means the setup does not provide vault‑level isolation, long‑term retention, or ransomware‑resilient protection.
For true vault‑level protection, the file share must be configured with Vault‑Standard (vaulted) backup, where backup data is copied and retained in the Recovery Services vault.
In that case, you would see:
- A backup policy with Backup tier: Vault‑Standard
- Recovery points showing Vault (or Snapshot + Vault)
- Vault‑level retention configured independently of the storage account
Official documentation for reference:
- About Azure Files backup (Snapshot vs Vaulted tiers): https://learn.microsoft.com/azure/backup/azure-file-share-backup-overview
- How Azure Files snapshot backups work (data stays in the storage account): https://learn.microsoft.com/azure/backup/backup-azure-files
- Vaulted Backup for Azure Files (Vault‑Standard protection): https://learn.microsoft.com/azure/backup/azure-file-share-backup-overview#vault-standard-tier
If you require offsite protection, longer retention, or stronger resilience against storage account deletion or ransomware scenarios, update the backup policy to use Vault‑Standard (vaulted) backup for this file share.
Please let us know if you would like guidance on moving this file share to Vault‑Standard (vaulted) backup to achieve true offsite, long‑term protection. We’ll be happy to assist.
Thanks,
Suchitra.