Kaseya 365 User: Getting started with Datto SaaS Protection

SECURITY  Master role in KaseyaOne and Administrator role in Datto Partner Portal and Datto SaaS Protection.

Getting up and running with Datto SaaS Protection is an easy process that will have you backing up your M365 tenants within an hour. To start protecting your M365 environment with Datto SaaS Protection, you will:

  1. Log in to SaaS Protection from the Datto Partner Portal, described below in Logging in for the first time.

  2. Configure KaseyaOne Unified Login, described below in Configuring KaseyaOne Unified Login.

  3. Start running backups by adding your M365 tenants to SaaS Protection. An M365 tenant is called an organization in SaaS Protection. Steps to add an organization are covered below in Completing the self-guided onboarding.

In addition to the steps needed to start running backups, this article includes the following supplemental information:

NOTES   

●   Your Kaseya 365 User subscription includes Datto Backup for Microsoft Entra ID. This module is managed through the SaaS Backup page in the UniView portal. If you are using Microsoft Entra ID, start running automated backups of your Entra ID tenant configurations as described in this article: Welcome to Datto Backup for Microsoft Entra ID.

●   If you are migrating to SaaS Protection from Backupify, your existing functionality and UI will remain the same but you will have access to additional features and automations. Once you have been transitioned, you will access SaaS Protection through the Datto Partner Portal, as described below in Logging in for the first time.

The browser used to access Datto SaaS Protection must meet these requirements:

Requirement Description
Supported browsers KaseyaOne supports the following browsers:

  • Chrome

  • Safari

  • Firefox

  • Microsoft Edge
Allowlist You are required to add IP address 185.217.56.0/24 to the allowlist in the browser used to access Datto SaaS Protection.
Allow pop-ups To ensure the smooth operation and correct functionality, it is recommended that you enable pop-ups in your browser. To learn more about how to manage pop-up blockers, follow the link for your browser below:

If you have purchased Kaseya 365 and are new to SaaS Protection, you will complete your initial setup steps in both KaseyaOne and SaaS Protection (located within the Datto Partner Portal). The process used to log in to SaaS Protection for the first time varies by whether you are already using Datto Partner Portal to access other Kaseya modules or are new to Datto Partner Portal. See these procedures for details:

  1. Log in to KaseyaOne and select the Kaseya 365 Setup Guide page in the left navigation menu. (If you have multiple subscriptions, also select the Kaseya 365 User subscription.)

  2. Locate your SaaS Protection module in the Modules for you to set up section under Step 1.

NOTES  If you are not the module's designated provisioning administrator, SaaS Protection displays in one of these sections below:

  • Modules for others to set up: You cannot activate the module. Reach out to the designated administrator using the email that displays to have them activate SaaS Protection and set up an account for you.
  • Login to your existing modules: SaaS Protection has already been activated. If you have Datto Partner Portal and SaaS Protection accounts, click Log in and proceed to Step 6 below. If not, reach out to your module administrator(s) to request accounts.

  1. Make note of the login details that display (username, company name, and login URL).

  2. Click the SaaS Protection Activate link.

  3. On the Set Your Password page, enter a new password for your Datto Partner Portal account.

  4. The Datto Portal login page opens. Log in with the username provided on the Kaseya 365 Setup Guide page and the new password you just set.
  5. The Datto Partner Portal Terms of Service display. Read the terms of service. Check the I Agree... box. Click Continue.
  6. On the Select Authentication Method page, configure two-factor authentication (2FA) for Datto Partner Portal. Enter the verification code and click Enable 2FA.
  7. If the Your Available Tenants page displays, locate your tenant and click Continue. (This page displays only if you have multiple tenants.)
  8. The Partner Portal Home page displays. Click Manage under Datto SaaS Protection.

  9. You are logged in to SaaS Protection and the SaaS Protection Status page displays.

NOTE  If you have migrated from Backupify, select your organization on the SaaS Protection Status page to view the organization's Overview page. (This Overview page is the home page that displayed when you logged in to Backupify.)

Next step: Configuring KaseyaOne Unified Login.

  1. Log in to KaseyaOne and select the Kaseya 365 Setup Guide page in the left navigation menu. (If you have multiple subscriptions, also select the Kaseya 365 User subscription.)

  2. Locate your SaaS Protection module in the Modules for you to set up section under Step 1.

NOTES  If you are not the module's designated provisioning administrator, SaaS Protection displays in one of these sections below:

  • Modules for others to set up: You cannot activate the module. Reach out to the designated administrator using the email that displays to have them activate SaaS Protection and set up an account for you.
  • Login to your existing modules: SaaS Protection has already been activated. If you have Datto Partner Portal and SaaS Protection accounts, click Log in and proceed to Step 6 below. If not, reach out to your module administrator(s) to request accounts.

  1. Make note of the login details that display (username, company name, and login URL).

  2. Click the SaaS Protection Activate link.

  3. The Datto Portal login page opens. Log in to your portal as the username shown in Step 1 on the Kaseya 365 Setup Guide page.
  4. On the Your Available Tenants page, locate the Datto Portal and click Continue.
  5. If you are managing multiple Datto Portal tenants in your environment, locate your tenant on the Your Available Tenants page and click Continue.
  6. The Partner Portal Home page displays. Click Manage under Datto SaaS Protection.

  7. You are logged in to SaaS Protection and the SaaS Protection Status page displays.

NOTE  If you have migrated from Backupify, select your organization on the SaaS Protection Status page to view the organization's Overview page. (This Overview page is the home page that displayed when you logged in to Backupify.)

Next step: Configuring KaseyaOne Unified Login.

KaseyaOne Unified Login connects your Kaseya modules with KaseyaOne so that you can log in once - to KaseyaOne - and access all of your Kaseya modules.

Datto SaaS Protection is managed through the Datto Partner Portal and does not have direct single sign-on (SSO) integration with KaseyaOne. You will use the procedure below to enable Unified Login for Datto Partner Portal. After you enable Unified Login in the Datto Partner Portal, you can access SaaS Protection from KaseyaOne by launching SSO to Datto Partner Portal and clicking the Datto SaaS Protection Manage link on the Partner Portal Home page.

NOTE  If you have already been using Datto Partner Portal, KaseyaOne Unified Login may already be enabled. You can check this on the Kaseya 365 Setup Guide page in KaseyaOne by looking at your SaaS Protection module under Step 2: Connect modules to KaseyaOne by enabling Unified Login. If its KaseyaOne Unified Login status is Disabled, use the procedure below to enable the feature. If its KaseyaOne Unified Login status is Enabled, no further action is needed.

To enable Log In with KaseyaOne for Datto Partner Portal, do the following:

  1. Log in to the Datto Partner Portal and navigate to Admin > Security Settings.

NOTE  You must be assigned the Security Admin role to see and access the Security Settings menu. Contact your Datto Partner Portal administrator for assistance if you do not have the Security Admin role. For additional information, refer to this Datto Partner Portal article: Assign a Security Admin.

  1. Go to the Single Sign-on section of the page that opens and click Enable Log In with KaseyaOne.

  2. The KaseyaOne login page opens prompting you to log in. Enter your KaseyaOne credentials and then the verification code to enable Log In with KaseyaOne.

Unified Login for Datto Partner Portal is now enabled. Users will automatically gain access to Datto Partner Portal through Log In with KaseyaOne, and Datto Partner Portal will display in the My Modules list in KaseyaOne.

For more information, refer to this Datto Partner Portal article: KaseyaOne integration with Datto Partner Portal.

Next step: Completing the self-guided onboarding.

To start protecting your Microsoft 365 tenants, follow the self-guided onboarding tour to add the organizations to protect.

Self-guided onboarding launches automatically the first time you log in to SaaS Protection as an administrator. You can also access it at any time by clicking the graduation cap icon, as shown here:

NOTE  If you're moving to SaaS Protection from Veeam, Acronis, or SkyKick, check out this article for helpful tips: Moving to Datto SaaS Protection from Veeam, Acronis, or SkyKick.

Adding an organization involves the following steps:

  1. Adding the name and core details.

  2. Selecting the commitment term and retention model for the organization.

  3. Selecting whether you or your organization will manage the SaaS Protection account.

  4. Deciding whether to automatically protect new users and enable a user license cap to prevent the organization from consuming too many SaaS Protection licenses.

For supplemental information, refer to this article as you work through the onboarding tour: Adding a new Datto SaaS Protection organization.

You will manage your SaaS Protection environment on the SaaS Protection Status page:

The SaaS Protection Status page allows you to do the following:

  • View charts to monitor vital statistics regarding all your SaaS Protection accounts.

  • Add and remove organizations.

  • Review your total license usage for each subscription type and license usage for each organization.

  • View Graphus organizations and be redirected to Graphus to analyze the threats.

Refer to Exploring the SaaS Protection Status page for complete details.

Depending on the other IT Complete modules active in your stack, you can take advantage of the following integrations to improve security and overall operations: