Introduction

Usually, your account must be assigned the global administrator role in order to protect Microsoft 365 data using the cloud Agent for Microsoft 365. 

However, in some cases, it may be impossible to use the Global Administrator role, e.g. due to security restrictions.

Solution

Grant Tenant wide permissions to the Backup Service application and create a custom role for this purpose. Please follow instructions in Microsoft documentation: