North Brook Vault
- Operate service infrastructure and provider-managed storage.
- Run configured backup jobs and retention processing.
- Surface job history, outcome state, and item-level errors.
- Support documented service-side exceptions.
MSP service delivery · Managed SaaS
Managed Microsoft 365 Backup for MSPs
For managed service providers (MSPs), scope each client by tenant, workload, and object type. North Brook Vault operates the backup service and provider-managed storage; your MSP owns client onboarding, outcome review, escalation, and recovery acceptance.
Responsibility split
A managed platform does not remove operating ownership.
Define who approves requirements, operates the service, reviews each tenant, authorizes recovery, and accepts the restored result before adding a client.
Your MSP
- Onboard and scope each contracted client tenant.
- Review outcomes, investigate partial failures, and escalate.
- Verify recovery requests, operate supported restores, and record evidence.
- Reconcile service packaging, billing inputs, and offboarding.
Your client
- Approve business requirements, scope, and known exclusions.
- Authorize tenant consent and customer-side access.
- Approve recovery requests and risk decisions.
- Validate and accept recovered business data.
MSP operational proof
Turn Microsoft 365 backup into a multi-tenant client service.
A green job is one signal. A defensible managed service also needs scope, ownership, exception handling, exit decisions, and accepted recovery evidence.
Establish a usable baseline
Record tenant identity, contacts, required objects, consent, policy, exclusions, billing inputs, first usable recovery point, and client acceptance.
Verify tenant separation
Check that credentials, jobs, snapshots, schedules, policies, operator access, support evidence, and restore destinations stay with the intended client.
Review outcomes and item failures
Review the latest usable point and inspect partial results by object, handler, permission, throttling, deleted source, and unsupported type.
Close exceptions with evidence
Open a tenant-specific ticket, assign an owner and notification condition, then close with a new usable point or an approved exception.
Control the client exit
Approve the stop date, retained-data or deletion decision, recovery access, credential revocation, historical-point handling, and final billing.
Prove recovery, not activity
Restore a representative supported object, compare the required content and metadata, record differences, and obtain business-owner acceptance.
Connect / Protect / Recover
A three-stage operating path.
Keep tenant access, configured protection, and validated recovery as separate control points.
-
01
Connect
Associate the intended tenant, grant the documented Microsoft Graph application permissions, and use preflight results to resolve missing or unsupported access.
-
02
Protect
Configure tenant-scoped schedules and retention. Review completed jobs and item-level outcomes before treating a recovery point as usable.
-
03
Recover
Select a stored snapshot, initiate only a supported restore path, validate the approved destination, and record result acceptance or remaining gaps.
Workload scope
Capture and restore are different claims.
Coverage is object-specific. Use the canonical guides to confirm the current handler, destination, conflict behavior, and fidelity for every client requirement.
Exchange Online
Capture: Selected messages, folders, calendars, and contacts through Microsoft Graph handlers.
Restore: Selective and object-specific. Do not infer recovery of every captured object or mailbox configuration.
Exchange guideOneDrive for Business
Capture: Current files, folders, content, metadata, hierarchy, and separate permission snapshots.
Restore: Supported drive items. File version history is not captured; permission fidelity requires validation.
OneDrive guideSharePoint Online
Capture: Supported sites, lists, list items, drive items, pages, and selected structural metadata.
Restore: List items, site drive items, and site pages. No complete site, list-structure, or universal permission restore claim.
SharePoint guideMicrosoft Teams
Capture: Supported teams, memberships, channels, messages, chats, tabs, apps, and permitted meeting metadata.
Restore: Team-member objects only through the Teams path. No chat or channel-message restore and no channel reconstruction.
Teams guideTransparent pricing
Public inputs for MSP planning.
Estimate the North Brook Vault component separately from your monitoring, service desk, recovery labor, margin, and client-facing package.
Subject to the monthly account minimum.
The minimum applies to the calculated monthly service total.
Each additional tenant is $25/month; each tenant includes 1 GB of storage.
The first retention month is included. Actual retained volume can differ from estimates.
The published calculation combines seat fees, additional tenant fees, and billable retained storage, then applies the $199 minimum. Taxes, exceptional work, negotiated terms, and MSP-added services are separate; a written proposal controls final pricing.
Open pricing calculatorMSP FAQ
Questions to settle before client rollout.
Package the supported service boundary, not a workload-wide promise. Keep every requirement, exception, and acceptance decision client-specific.
Five MSP operating questionsCan an MSP manage multiple client tenants in one service?
Yes. Credentials, jobs, snapshots, schedules, and retention policies are associated with the correct tenant. The MSP must still test operator access, client boundaries, and restore authorization during onboarding.
Who is responsible for monitoring backup outcomes?
North Brook Vault operates the service and surfaces job state, history, and item-level errors. The MSP reviews each contracted tenant, opens and escalates exceptions, informs the client under the agreed service definition, and closes issues with a new usable point or accepted exception.
Can North Brook Vault restore Teams messages or OneDrive version history?
No. OneDrive file version history is not captured. Teams chat messages, channel messages, and channel structures are not restorable. Teams files follow the supported OneDrive or SharePoint drive-item recovery path.
How is the managed service priced for MSPs?
Public pricing is $5 per protected seat per month with a $199 monthly account minimum. The first tenant and first retention month are included; each additional tenant is $25 per month, each tenant includes 1 GB of storage, and billable retained storage is $0.12 per GB-month. A written proposal controls final pricing.
What should happen when an MSP offboards a client?
Before access changes, the MSP and client should approve the stop date, final protected scope, retained-data or deletion decision, recovery access, credential revocation, and final billing. The written agreement should control exit and deletion terms.
Scope before rollout
Define the MSP service boundary.
Email the tenant count, protected seats, required object types, retention, recovery destinations, operating roles, and known client constraints. We will use those inputs to structure a recovery consultation.