Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. Cohesity Alta SaaS Protection Administrator's Guide
  5. Protect Exchange Online data
  7. Setting up Exchange Online data protection with Cohesity Alta SaaS Protection
  9. Configure capture scope for Exchange connectors
Cohesity Alta SaaS Protection Administrator's Guide

Configure capture scope for Exchange connectors

Note:

To know more about the maximum number of users data that can be backed up, contact Cohesity Support. You can also go to the Licenses page to view your subscription details.

You can use one of the following procedures as per your backup requirement:

To configure capture scope to back up mailboxes of all users

  1. From the Exchange settings section, click User mailboxes and then click All mailboxes.
  2. Configure folder filter to limit the backup scope to specific folders in the mailboxes of users:

    See Configure Folder filter.

  3. (Optional) Do the following:

    • Select the Recoverable items check box to back up items in the Recoverable Items folder.

    • Select the Archive mailboxes check box to back up items in the Archive folder.

  4. Click Next to configure credentials.

    See Configure credentials.

To configure the capture scope to back up the mailboxes of all users using the Rolling mailbox scope option

Important: With the 2.32.1 release, this option will not be available for new connectors. For existing connectors, this option will appear as read only.

If you have a large number of mailboxes in your Exchange Online environment, the backup scope can become extensive. You can configure the capture scope using the Rolling mailbox scope option to manage this scenario. By selecting this option, you can map a specific number of mailboxes to be included in the backup. It helps minimize the load on any one connector. You can configure multiple connectors to cover all the mailboxes in your environment.

Note:

To know more about the maximum number of mailboxes that can be backed up, contact Cohesity Support. You can also go to the Licenses page to view your subscription details.

  1. From the Exchange settings section, click User mailboxes and then click All mailboxes.
  2. Click the Rolling mailbox scope option and do the following:

    • Enter the number of mailboxes that you want to map to this connector in the No. of mailboxes in scope field.

      Only the specified number of mailboxes can be backed up using this connector.

  3. (Optional) Configure filters to limit the backup scope to specific users based on their Entra ID attributes.

    See Configure User filter.

    See Configure Group filter.

  4. (Optional) Configure folder filter to limit the backup scope to specific folders in the mailboxes of users.

    See Configure Folder filter.

  5. (Optional) Do the following:

    • Select the Recoverable items check box to back up the Recoverable Items folder.

    • Select the Archive mailboxes check box to back up the archived mailboxes.

  6. Click Next to configure credentials.

    See Configure credentials.

To configure the capture scope to back up the mailboxes of users using the Alphabetical mailbox scope option

Important: With the 2.32.1 release, this option will not be available for new connectors. For existing connectors, this option will appear as read only.

If you have a large number of mailboxes in your Exchange Online environment, the backup scope can become extensive. To manage this scenario, configure the capture scope using the Alphabetical mailbox scope option. You can map a range of mailboxes to be included in the backup. It helps minimize the load on any one connector. To cover all the mailboxes in your environment, you can configure multiple connectors.

Note:

To know more about the maximum number of mailboxes that can be backed up, contact Cohesity Support. You can also go to the Licenses page to view your subscription details.

  1. From the Exchange settings section, click User mailboxes and then click All mailboxes.
  2. Click the Alphabetical mailbox scope option and do the following:

    • Enter the range of email addresses that you want to back up using this connector.

      For example, if you specify the start letter as 'A' and the end letter as 'F', all email addresses within the range of 'A' to 'F' are included in the backup scope.

      The mailboxes are processed based on the first letter of the email address.

      If you are using the Alphabetic mailbox scope, you may need to enable the Include mailbox not starting with the letter option for one of the connectors. It backs up the mailboxes of the users whose email addresses do not begin with an alphabet.

  3. (Optional) Configure filters to limit the backup scope to specific users based on their Entra ID attributes.

    See Configure User filter.

    See Configure Group filter.

  4. (Optional) Configure folder filters to limit the backup scope to specific folders in the mailboxes of users.

    See Configure Folder filter.

  5. (Optional) Do the following:

    • Select the Recoverable items check box to back up items in the Recoverable Items folder.

    • Select the Archive mailboxes check box to back up items in the Archive folder.

  6. Click Next to configure credentials.

    See Configure credentials.

You can use the following procedure to limit the capture scope to specific domains only.

Note:

To know more about the maximum number of users data that can be backed up, contact Cohesity Support. You can also go to the Licenses page to view your subscription details.

To configure the capture scope to back up the mailboxes of specific users only

  1. From the Exchange settings section, click User mailboxes and then click Specific mailboxes.
  2. Do the following:

    • Click + Add SMTP addresses.

    • On the Add SMTP Addresses page, enter the email addresses of the users, groups, or Teams that are to be backed up using this connector.

      Use semicolons between addresses.

    • Click Add.

  3. (Optional) Configure the folder filters to limit the backup scope to specific folders in the mailboxes of users.

    See Configure Folder filter.

  4. (Optional) Do the following:

    • Select the Recoverable items check box to back up items in the Recoverable Items folder.

    • Select the Archive mailboxes check box to back up items in the Archive folder.

  5. Click Next to configure credentials.

    See Configure credentials.

To configure the capture scope to back up mailboxes from specific domains only

You can use the following procedure to limit the capture scope to specific domains only.

Note:

To know more about the maximum number of users data that can be backed up, contact Cohesity Support. You can also go to the Licenses page to view your subscription details.

  1. From the Exchange settings section, click All mailboxes.
  2. Select the Limit backup to specific domains check box > enter domain SMTP addresses in the Domain names section.
  3. Do the following:

    • Click + Add SMTP addresses.

    • On the Add SMTP Addresses page, enter domain names.

      Use semicolons between addresses.

    • Click Add.

  4. (Optional) Configure folder filters to limit the backup scope to specific folders the mailboxes of users.

    See Configure Folder filter.

  5. (Optional) Do the following:

    • Select the Recoverable items check box to back up items in the Recoverable Items folder.

    • Select the Archive mailboxes check box to back up items in the Archive folder.

  6. Click Next to configure credentials.

    See Configure credentials.

To configure the capture scope to back up all Group/Teams mailboxes

To enable Dynamic group mailbox backup using PowerShell as the management API, provide an impersonation account representing a member or owner of the respective group. Adding an impersonation account is mandatory for Modern/OAuth authentication. In this case, the provided users are added as members or owners (in the case of Dynamic groups) to all groups and Teams that are in backup scope.

  1. From the Exchange settings section, click Group/Teams mailboxes and then click All mailboxes.
  2. (Optional) Configure the folder filter to limit the backup scope to specific folders in the mailboxes of users.

    See Configure Folder filter.

  3. (Optional) Do the following:

    • Select the Recoverable items check box to back up items in the Recoverable Items folder.

    • Select the Archive mailboxes check box to back up items in the Archive folder.

  4. Click Next to configure credentials.
  5. Click + Add impersonations.
  6. On the EWS OAuth Impersonation User SMTP addresses page, enter impersonation accounts, click Add.

    Use semicolons between email addresses.

    The added account is displayed page.

  7. Click Next to configure credentials.

    See Configure credentials.

To configure the capture scope to back up specific Group/Teams mailboxes

  1. From the Exchange settings section, click Group/Teams mailboxes and then click Specific mailboxes.
  2. Do the following:

    • Click + Add SMTP addresses.

    • On the Add SMTP Addresses page, enter the email addresses of the users, groups, or Teams that are to be backed up using this connector.

      Use a semicolon between addresses.

    • Click Add.

  3. (Optional) Configure the user filter to limit the backup scope to specific users based on their Entra ID attribute.

    See Configure Group filter.

  4. (Optional) Configure the folder filter to limit the backup scope to specific folders in the mailboxes of users.

    See Configure Folder filter.

  5. (Optional) Do the following:

    • Select the Recoverable items check box to back up the Recoverable Items folder.

    • Select the Archive mailboxes check box to back up the archived mailboxes.

  6. Click Next to configure credentials.
  7. Click + Add impersonations.
  8. On the EWS OAuth Impersonation User SMTP addresses page, enter impersonation accounts, click Add.

    Use semicolons between email addresses.

    The added account is displayed page.

  9. Click Next to configure credentials.

    See Configure credentials.

You can use the following procedure to back up Public folders in your Exchange Online environment.

To configure the capture scope to back up Public folders

  1. From the Exchange settings section, click Public Folders.
  2. (Optional) Configure folder filter to limit the backup scope to specific folders.

    See Configure Folder filter.

  3. Click Next to configure credentials.
  4. Click + Add impersonations.
  5. On the EWS OAuth Impersonation User SMTP addresses page, enter impersonation accounts, click Add.

    The added account is displayed page. The impersonated user must have a mailbox and full access to the entire Public folder hierarchy.

  6. Configure the credentials.

    See Configure credentials.

  7. Click Next.

Feedback

Was this page helpful?
Previous

Setting up Exchange Online data protection with Cohesity Alta SaaS Protection

Next

Protect SharePoint sites and data

Feedback

Was this page helpful?