--- sourceDocument: Australia IT Operations Management sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # Azure Data Protection Backup Vault # Azure Data Protection Backup Vault pattern-based discovery {#ariaid-title1} Release version: Australia Updated March 12, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Azure Data Protection Backup Vault pattern-based discovery The Azure Data Protection Backup Vault pattern-based discovery enables ServiceNow customers to identify and map Azure Backup Vault resources within their cloud environments. This discovery runs through the Discovery and Service Mapping Patterns application, which periodically updates to provide the latest Azure service detection capabilities. The pattern populates data both in the Configuration Management Database (CMDB) and associated non-CMDB tables, enhancing visibility and management of Azure backup vaults. Show full answer Show less ## Key Requirements and Configuration * **REST API Permissions:** Customers must verify and grant necessary REST API permissions by downloading the Cloud Discovery patterns spreadsheet, which details required permissions, pattern names, CI classes, and vendor documentation links. * **Microsoft Azure Discovery Prerequisites:** Ensure Azure discovery prerequisites are met as outlined in the Microsoft Azure Cloud discovery documentation. * **Resource Inclusion List:** Remove any relevant resources from the Resource Inclusion List table to prevent duplicate discoveries. * **Pattern Activation:** The Azure Data Protection Backup Vault pattern is disabled by default. From Visibility Content version 6.28.0 onward, pattern activation or deactivation no longer counts as customization and updates will persist after upgrades. Customers should enable the pattern to start discovery. * **Discovery Scheduling for GovCloud:** When discovering Azure GovCloud (US) accounts, configure the discovery schedule to use the appropriate datacenter URL. ## Data Handling and CMDB Integration The discovery pattern populates data in both CMDB and non-CMDB tables: * **Non-CMDB Data:** The pattern stores extended inventory information in non-CMDB Azure tables accessible via the ServiceNow interface, including fields like kind, location, object ID, resource group, subscription ID, and tenant ID. * **CMDB Data:** It creates and updates records in the Cloud Resource \[cmdbcicmpresource\] table with fields such as install status, location, name, object ID, operational status, and resource type (set as microsoft.dataprotection/backupvaults). * **CI Relationships:** The pattern establishes relationships linking backup vaults to resource groups, cloud resources, and Azure datacenters to build a comprehensive service map. * **Tag Discovery:** Azure tags associated with backup vaults are collected and stored in the Key Value \[cmdbkeyvalue\] table, enabling tag-based filtering and reporting. ## Practical Benefits By implementing this pattern-based discovery, ServiceNow customers gain automated, up-to-date insights into their Azure Backup Vault resources. This supports improved cloud resource management, accurate CMDB population, and enhanced service mapping, which are essential for operational visibility, compliance, and governance of Azure environments. Discovery and Service Mapping Patterns finds Azure services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store. ## Pattern-based discovery and mapping requirements {#azure-data-protection-backup-vault__section_ipy_53n_jfc} Verify the REST API permissions : Download the [Cloud Discovery patterns spreadsheet](https://downloads.docs.servicenow.com/resource/enus/api/servicenow-discovery-patterns-api-details.xlsx) so you can grant user permissions required for running the Discovery patterns. In addition to permissions, the spreadsheet also includes useful information such as pattern names, types, CI Classes, and links to vendor documentation. New patterns are available quarterly, so check periodically to be sure you have the latest version of the spreadsheet.{#azure-data-protection-backup-vault__cloud-discovery-api-ph-short-prereq} Verify the Microsoft Azure discovery prerequisites{#azure-data-protection-backup-vault__verify-azure-discovery-prerequisites-dlentry} : For more information, see the prerequisites section in [Microsoft Azure Cloud discovery using patterns](https://www.servicenow.com/docs/e2521~KHAw8EO7j1nC9QMA "Discovery uses multiple patterns to discover components of the Microsoft Azure Cloud deployment during horizontal discovery. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store."). Remove resources from the Resource Inclusion List table{#azure-data-protection-backup-vault__remove-resource-inclusion-list-azure} : Verify that the relevant resource isn't listed in the Resource Inclusion List \[sa_cloud_inventory_resource_whitelist\] table to avoid duplicate discovery. For more information on removing resources from the Resource Inclusion List, see [Microsoft Azure resource inventory discovery](https://www.servicenow.com/docs/tO3nNqXv4zOe7q99krvAnA "The ServiceNow Discovery application uses the Azure Resource Inventory (LP) pattern to find resources available through Azure that don’t have a dedicated pattern. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store."). Enable the relevant pattern{#azure-data-protection-backup-vault__enable-pattern-reuse-dlentry} : The pattern for this service is disabled by default. Starting with Visibility Content version 6.28.0, activating or deactivating a pattern won't be considered a customization, and it will continue to receive updates. Patterns that were previously activated or deactivated will reset to the latest predefined version after upgrading while retaining the last active field value. For more information on enabling patterns, see [Activate a disabled pattern](https://www.servicenow.com/docs/aypCYVQdO8oFebLMLEI89g "If you want to use a pattern for discovery that's disabled by default, activate it manually.").{#azure-data-protection-backup-vault__activating-disabled-pattern-not-customization} Configure the Discovery schedule to support GovCloud{#azure-data-protection-backup-vault__configure-govcloud-azure-dlentry} : Discovering Azure GovCloud (US) accounts requires using a datacenter URL when setting up an Azure service account. For more information, see [Set up Azure service accounts](https://www.servicenow.com/docs/XKQpJvxWTKNL58XCkRHVxA "Create and configure cloud service accounts at ServiceNow AI Platform for the corresponding Microsoft Azure accounts.").{#azure-data-protection-backup-vault__configure-govcloud-azure-dd} {#azure-data-protection-backup-vault__configure-govcloud-azure-dd} Discovery and Service Mapping Patterns application populates data in both CMDB and non-CMDB tables. ## Data stored in non-CMDB tables {#azure-data-protection-backup-vault__section_aq4_qkq_hfc} Discovery and Service Mapping Patterns application populates data in the non-CMDB table when running the Azure - Data Protection Backup Vault - Extended Inventory(LP) pattern. You can review the non-CMDB Azure tables by navigating to AllConfigurationAzure. You can also search the navigation filter for the specific pattern name. {#azure-data-protection-backup-vault__section_aq4_qkq_hfc__entry__2} | Field | Description | |-|-| | Kind \[kind\] | The type or category of the resource. | | Location \[location\] | The geographic location where the resource is deployed. | | Object Id \[object_id\] | The unique identifier for the resource. | | Resource Group \[resource_group\] | Name of the resource group. | | Subscription ID \[subscription_id\] | The subscription ID. | | Tenant ID \[tenant_id\] | The identifier of the Azure Active Directory tenant. | | Configuration Item \[configuration_item\] | References the Cloud Resource \[cmdb_ci_cmp_resource\] table. | [Table 1. Azure Data Protection - Backup Vault \[cmdb_azure_data_protection_backup_vault\]] ## Data stored in CMDB tables Discovery and Service Mapping Patterns application populates data in the CMDB when running the Azure - Data Protection Backup Vault - Extended Inventory(LP) pattern. {#azure-data-protection-backup-vault__entry__18} | Field | Description | |-|-| | Install Status \[install_status\] | Install status of the resource. Default value is Installed. | | Location \[location\] | The geographic location where the resource is deployed. | | Name \[name\] | The name given to the resource. | | Object ID \[object_id\] | The unique identifier for the resource. | | Operational status \[operational_status\] | Operational status of the resource. Default value is Operational. | | Resource type \[resource_type\] | Type of resource. The value is set to microsoft.dataprotection/backupvaults. | [Table 2. Cloud Resource \[cmdb_ci_cmp_resource\]] ## CI relationships The pattern creates these relationships to support discovery. {#azure-data-protection-backup-vault__entry__33} | CI | Relationship | CI | |-|-|-| | Resource Group \[cmdb_ci_resource_group\] | Contains::Contained by | Cloud Resource \[cmdb_ci_cmp_resource\] | | Cloud Resource \[cmdb_ci_cmp_resource\] | Hosted on::Hosts | Azure Datacenter \[cmdb_ci_azure_datacenter\] | | Azure Data Protection - Backup Vault \[cmdb_azure_data_protection_backup_vault\] | References | Cloud Resource \[cmdb_ci_cmp_resource\] | [ ] ## Azure tag discovery {#azure-data-protection-backup-vault__section_ezc_jwt_jfc} The pattern collects tags and populates them in the Key Value \[cmdb_key_value\] table. {#azure-data-protection-backup-vault__table_axq_spc_y2c__entry__2} | Field | Description | |-|-| | Key \[key\] | Tag name. | | Value \[value\] | Tag value. | [Table 3. Key Value \[cmdb_key_value\]] {#azure-data-protection-backup-vault__table_axq_spc_y2c} *[\>]: and then