Vaults - Create Or Update

Service:: Recovery Services

API Version:: 2025-08-01

Creates or updates a Recovery Services vault.

PUT https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.RecoveryServices/vaults/{vaultName}?api-version=2025-08-01

URI Parameters

Name	In	Required	Type	Description
resourceGroupName	path	True	string minLength: 1 maxLength: 90	The name of the resource group. The name is case insensitive.
subscriptionId	path	True	string minLength: 1	The ID of the target subscription.
vaultName	path	True	string	The name of the Vault
api-version	query	True	string minLength: 1	The API version to use for this operation.

Request Header

Name	Required	Type	Description
x-ms-authorization-auxiliary		string

Request Body

Name	Required	Type	Description
location	True	string	The geo-location where the resource lives
etag		string	etag for the resource.
identity		IdentityData	Identity for the resource.
properties		VaultProperties	Properties of the vault.
sku		Sku	Identifies the unique system identifier for each Azure resource.
tags		object	Resource tags.

Responses

Name	Type	Description
200 OK	Vault	Resource 'Vault' update operation succeeded
201 Created	Vault	Resource 'Vault' create operation succeeded Headers Location: string Retry-After: integer
Other Status Codes	CloudError	An unexpected error response.

Name

Type

Description

200 OK

Vault

Resource 'Vault' update operation succeeded

201 Created

Vault

Resource 'Vault' create operation succeeded

Headers

Location: string
Retry-After: integer

Other Status Codes

CloudError

An unexpected error response.

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

Create or Update Recovery Services vault

Create or Update Vault performing critical operation With MUA

Create or Update Vault with CustomerManagedKeys

Create or Update Vault With Monitoring Setting

Create or Update Vault With Redundancy Setting

Create or Update Vault with Source scan configuration

Create or Update Vault with User Assigned Identity

Create or Update Recovery Services vault

Sample request

HTTP

PUT https://management.azure.com/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample?api-version=2025-08-01

{
  "identity": {
    "type": "SystemAssigned"
  },
  "location": "West US",
  "properties": {
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  }
}

Sample response

Status code:: 200

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "3137d6c7-5d6c-411c-b934-7a2a729ee247",
    "tenantId": "d676e86e-2206-4a7c-999c-ece52c144b5b"
  },
  "location": "westus",
  "properties": {
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "RS0",
    "tier": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Status code:: 201

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "3137d6c7-5d6c-411c-b934-7a2a729ee247",
    "tenantId": "d676e86e-2206-4a7c-999c-ece52c144b5b"
  },
  "location": "westus",
  "properties": {
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "RS0",
    "tier": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Create or Update Vault performing critical operation With MUA

Sample request

HTTP

PUT https://management.azure.com/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample?api-version=2025-08-01

{
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {}
    }
  },
  "location": "West US",
  "properties": {
    "encryption": {
      "infrastructureEncryption": "Enabled",
      "kekIdentity": {
        "userAssignedIdentity": "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi"
      },
      "keyVaultProperties": {
        "keyUri": "https://cmk2xkv.vault.azure.net/keys/Key1/0767b348bb1a4c07baa6c4ec0055d2b3"
      }
    },
    "publicNetworkAccess": "Enabled",
    "resourceGuardOperationRequests": [
      "/subscriptions/38304e13-357e-405e-9e9a-220351dcce8c/resourcegroups/ankurResourceGuard1/providers/Microsoft.DataProtection/resourceGuards/ResourceGuard38-1/modifyEncryptionSettings/default"
    ]
  },
  "sku": {
    "name": "Standard"
  }
}

Sample response

Status code:: 200

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {
        "clientId": "fbe75b66-01c5-4f87-a220-233af3270436",
        "principalId": "075a0ca6-43f6-4434-9abf-c9b1b79f9219"
      }
    }
  },
  "location": "westus",
  "properties": {
    "encryption": {
      "infrastructureEncryption": "Enabled",
      "kekIdentity": {
        "useSystemAssignedIdentity": false,
        "userAssignedIdentity": "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi"
      },
      "keyVaultProperties": {
        "keyUri": "https://cmk2xkv.vault.azure.net/keys/Key1/0767b348bb1a4c07baa6c4ec0055d2b3"
      }
    },
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Status code:: 201

Azure-AsyncOperation: /subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample/operationStatus/YWUzNDFkMzQtZmM5OS00MmUyLWEzNDMtZGJkMDIxZjlmZjgzOzdmYzBiMzhmLTc2NmItNDM5NS05OWQ1LTVmOGEzNzg4MWQzNA==?api-version=2015-03-15
Retry-After: 10

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {}
    }
  },
  "location": "westus",
  "properties": {
    "encryption": {
      "infrastructureEncryption": "Enabled",
      "kekIdentity": {
        "useSystemAssignedIdentity": false,
        "userAssignedIdentity": "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi"
      },
      "keyVaultProperties": {
        "keyUri": "https://cmk2xkv.vault.azure.net/keys/Key1/0767b348bb1a4c07baa6c4ec0055d2b3"
      }
    },
    "provisioningState": "Provisioning",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Create or Update Vault with CustomerManagedKeys

Sample request

HTTP

PUT https://management.azure.com/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample?api-version=2025-08-01

{
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {}
    }
  },
  "location": "West US",
  "properties": {
    "encryption": {
      "infrastructureEncryption": "Enabled",
      "kekIdentity": {
        "userAssignedIdentity": "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi"
      },
      "keyVaultProperties": {
        "keyUri": "https://cmk2xkv.vault.azure.net/keys/Key1/0767b348bb1a4c07baa6c4ec0055d2b3"
      }
    },
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  }
}

Sample response

Status code:: 200

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {
        "clientId": "fbe75b66-01c5-4f87-a220-233af3270436",
        "principalId": "075a0ca6-43f6-4434-9abf-c9b1b79f9219"
      }
    }
  },
  "location": "westus",
  "properties": {
    "encryption": {
      "infrastructureEncryption": "Enabled",
      "kekIdentity": {
        "useSystemAssignedIdentity": false,
        "userAssignedIdentity": "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi"
      },
      "keyVaultProperties": {
        "keyUri": "https://cmk2xkv.vault.azure.net/keys/Key1/0767b348bb1a4c07baa6c4ec0055d2b3"
      }
    },
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Status code:: 201

Azure-AsyncOperation: /subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample/operationStatus/YWUzNDFkMzQtZmM5OS00MmUyLWEzNDMtZGJkMDIxZjlmZjgzOzdmYzBiMzhmLTc2NmItNDM5NS05OWQ1LTVmOGEzNzg4MWQzNA==?api-version=2015-03-15
Retry-After: 10

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {}
    }
  },
  "location": "westus",
  "properties": {
    "encryption": {
      "infrastructureEncryption": "Enabled",
      "kekIdentity": {
        "useSystemAssignedIdentity": false,
        "userAssignedIdentity": "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi"
      },
      "keyVaultProperties": {
        "keyUri": "https://cmk2xkv.vault.azure.net/keys/Key1/0767b348bb1a4c07baa6c4ec0055d2b3"
      }
    },
    "provisioningState": "Provisioning",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Create or Update Vault With Monitoring Setting

Sample request

HTTP

PUT https://management.azure.com/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample?api-version=2025-08-01

{
  "identity": {
    "type": "SystemAssigned"
  },
  "location": "West US",
  "properties": {
    "monitoringSettings": {
      "azureMonitorAlertSettings": {
        "alertsForAllFailoverIssues": "Disabled",
        "alertsForAllJobFailures": "Enabled",
        "alertsForAllReplicationIssues": "Enabled"
      },
      "classicAlertSettings": {
        "alertsForCriticalOperations": "Disabled",
        "emailNotificationsForSiteRecovery": "Enabled"
      }
    },
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  }
}

Sample response

Status code:: 200

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "3137d6c7-5d6c-411c-b934-7a2a729ee247",
    "tenantId": "d676e86e-2206-4a7c-999c-ece52c144b5b"
  },
  "location": "westus",
  "properties": {
    "monitoringSettings": {
      "azureMonitorAlertSettings": {
        "alertsForAllFailoverIssues": "Disabled",
        "alertsForAllJobFailures": "Enabled",
        "alertsForAllReplicationIssues": "Enabled"
      },
      "classicAlertSettings": {
        "alertsForCriticalOperations": "Disabled",
        "emailNotificationsForSiteRecovery": "Enabled"
      }
    },
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "RS0",
    "tier": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Status code:: 201

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "3137d6c7-5d6c-411c-b934-7a2a729ee247",
    "tenantId": "d676e86e-2206-4a7c-999c-ece52c144b5b"
  },
  "location": "westus",
  "properties": {
    "monitoringSettings": {
      "azureMonitorAlertSettings": {
        "alertsForAllFailoverIssues": "Disabled",
        "alertsForAllJobFailures": "Enabled",
        "alertsForAllReplicationIssues": "Enabled"
      },
      "classicAlertSettings": {
        "alertsForCriticalOperations": "Disabled",
        "emailNotificationsForSiteRecovery": "Enabled"
      }
    },
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "RS0",
    "tier": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Create or Update Vault With Redundancy Setting

Sample request

HTTP

PUT https://management.azure.com/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample?api-version=2025-08-01

{
  "identity": {
    "type": "SystemAssigned"
  },
  "location": "West US",
  "properties": {
    "publicNetworkAccess": "Enabled",
    "redundancySettings": {
      "crossRegionRestore": "Enabled",
      "standardTierStorageRedundancy": "GeoRedundant"
    }
  },
  "sku": {
    "name": "Standard"
  }
}

Sample response

Status code:: 200

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "3137d6c7-5d6c-411c-b934-7a2a729ee247",
    "tenantId": "d676e86e-2206-4a7c-999c-ece52c144b5b"
  },
  "location": "westus",
  "properties": {
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled",
    "redundancySettings": {
      "crossRegionRestore": "Enabled",
      "standardTierStorageRedundancy": "GeoRedundant"
    }
  },
  "sku": {
    "name": "RS0",
    "tier": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Status code:: 201

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "3137d6c7-5d6c-411c-b934-7a2a729ee247",
    "tenantId": "d676e86e-2206-4a7c-999c-ece52c144b5b"
  },
  "location": "westus",
  "properties": {
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled",
    "redundancySettings": {
      "crossRegionRestore": "Enabled",
      "standardTierStorageRedundancy": "GeoRedundant"
    }
  },
  "sku": {
    "name": "RS0",
    "tier": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Create or Update Vault with Source scan configuration

Sample request

HTTP

PUT https://management.azure.com/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample?api-version=2025-08-01

{
  "identity": {
    "type": "SystemAssigned"
  },
  "location": "West US",
  "properties": {
    "publicNetworkAccess": "Enabled",
    "securitySettings": {
      "sourceScanConfiguration": {
        "sourceScanIdentity": {
          "operationIdentityType": "SystemAssigned"
        },
        "state": "Enabled"
      }
    }
  },
  "sku": {
    "name": "Standard"
  }
}

Sample response

Status code:: 200

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2025-02-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "1be097b0-eb5e-4927-bac2-b24ee8716f64",
    "tenantId": "72f988bf-86f1-41af-91ab-2d7cd011db47"
  },
  "location": "westus",
  "properties": {
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled",
    "securitySettings": {
      "sourceScanConfiguration": {
        "sourceScanIdentity": {
          "operationIdentityType": "SystemAssigned"
        },
        "state": "Enabled"
      }
    }
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Status code:: 201

Azure-AsyncOperation: /subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample/operationStatus/YWUzNDFkMzQtZmM5OS00MmUyLWEzNDMtZGJkMDIxZjlmZjgzOzdmYzBiMzhmLTc2NmItNDM5NS05OWQ1LTVmOGEzNzg4MWQzNA==?api-version=2015-03-15
Retry-After: 10

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "SystemAssigned",
    "principalId": "1be097b0-eb5e-4927-bac2-b24ee8716f64",
    "tenantId": "72f988bf-86f1-41af-91ab-2d7cd011db47"
  },
  "location": "westus",
  "properties": {
    "provisioningState": "Provisioning",
    "publicNetworkAccess": "Enabled",
    "securitySettings": {
      "sourceScanConfiguration": {
        "sourceScanIdentity": {
          "operationIdentityType": "SystemAssigned"
        },
        "state": "Enabled"
      }
    }
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Create or Update Vault with User Assigned Identity

Sample request

HTTP

PUT https://management.azure.com/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample?api-version=2025-08-01

{
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {}
    }
  },
  "location": "West US",
  "properties": {
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  }
}

Sample response

Status code:: 200

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {
        "clientId": "fbe75b66-01c5-4f87-a220-233af3270436",
        "principalId": "075a0ca6-43f6-4434-9abf-c9b1b79f9219"
      }
    }
  },
  "location": "westus",
  "properties": {
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Status code:: 201

Azure-AsyncOperation: /subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample/operationStatus/YWUzNDFkMzQtZmM5OS00MmUyLWEzNDMtZGJkMDIxZjlmZjgzOzdmYzBiMzhmLTc2NmItNDM5NS05OWQ1LTVmOGEzNzg4MWQzNA==?api-version=2015-03-15
Retry-After: 10

{
  "name": "swaggerExample",
  "type": "Microsoft.RecoveryServices/vaults",
  "etag": "W/\"datetime'2017-12-15T12%3A36%3A51.68Z'\"",
  "id": "/subscriptions/77777777-b0c6-47a2-b37c-d8e65a629c18/resourceGroups/Default-RecoveryServices-ResourceGroup/providers/Microsoft.RecoveryServices/vaults/swaggerExample",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/85bf5e8c-3084-4f42-add2-746ebb7e97b2/resourcegroups/defaultrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/examplemsi": {}
    }
  },
  "location": "westus",
  "properties": {
    "provisioningState": "Provisioning",
    "publicNetworkAccess": "Enabled"
  },
  "sku": {
    "name": "Standard"
  },
  "tags": {
    "TestUpdatedKey": "TestUpdatedValue"
  }
}

Definitions

Name	Description
AlertsState
AssociatedIdentity	Identity details to be used for an operation
AzureMonitorAlertSettings	Settings for Azure Monitor based alerts
BackupStorageVersion	Backup storage version
BCDRSecurityLevel	Security levels of Recovery Services Vault for business continuity and disaster recovery
ClassicAlertSettings	Settings for classic alerts
CloudError	An error response from Azure Backup.
CmkKekIdentity	The details of the identity used for CMK
CmkKeyVaultProperties	The properties of the Key Vault which hosts CMK
createdByType	The type of identity that created the resource.
CrossRegionRestore	Flag to show if Cross Region Restore is enabled on the Vault or not
CrossSubscriptionRestoreSettings	Settings for Cross Subscription Restore Settings
CrossSubscriptionRestoreState
EnhancedSecurityState
Error	The resource management error response.
ErrorAdditionalInfo	The resource management error additional info.
IdentityData	Identity for the resource.
IdentityType	Identity type that should be used for an operation.
ImmutabilitySettings	Immutability Settings of vault
ImmutabilityState
InfrastructureEncryptionState	Enabling/Disabling the Double Encryption state
MonitoringSettings	Monitoring Settings of the vault
MultiUserAuthorization	MUA Settings of vault
PrivateEndpoint	The Private Endpoint network resource that is linked to the Private Endpoint connection.
PrivateEndpointConnection	Private Endpoint Connection Response Properties.
PrivateEndpointConnectionStatus	Gets or sets the status.
PrivateEndpointConnectionVaultProperties	Information to be stored in Vault properties as an element of privateEndpointConnections List.
PrivateLinkServiceConnectionState	Gets or sets private link service connection state.
ProvisioningState	Gets or sets provisioning state of the private endpoint connection.
PublicNetworkAccess	property to enable or disable resource provider inbound network traffic from public clients
ResourceIdentityType	The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities.
ResourceMoveState	The State of the Resource after the move operation
RestoreSettings	Restore Settings of the vault
SecureScoreLevel	Secure Score of Recovery Services Vault
SecuritySettings	Security Settings of the vault
Sku	Identifies the unique system identifier for each Azure resource.
SkuName	Name of SKU is RS0 (Recovery Services 0th version) and the tier is standard tier. They do not have affect on backend storage redundancy or any other vault settings. To manage storage redundancy, use the backupstorageconfig
SoftDeleteSettings	Soft delete Settings of vault
SoftDeleteState
SourceScanConfiguration	Source scan configuration of vault
StandardTierStorageRedundancy	The storage redundancy setting of a vault
State
systemData	Metadata pertaining to creation and last modification of the resource.
TriggerType	The way the vault upgrade was triggered.
UpgradeDetails	Details for upgrading vault.
UserIdentity	A resource identity that is managed by the user of the service.
Vault	Resource information, as returned by the resource provider.
VaultPrivateEndpointState	Private endpoint state for backup.
VaultProperties	Properties of the vault.
VaultPropertiesEncryption	Customer Managed Key details of the resource.
VaultPropertiesMoveDetails	The details of the latest move operation performed on the Azure Resource
VaultPropertiesRedundancySettings	The redundancy Settings of a Vault
VaultSubResourceType	Subresource type for vault AzureBackup, AzureBackup_secondary or AzureSiteRecovery
VaultUpgradeState	Status of the vault upgrade operation.

AlertsState

Enumeration

Value	Description
Enabled
Disabled

AssociatedIdentity

Object

Identity details to be used for an operation

Name	Type	Description
operationIdentityType	IdentityType	Identity type that should be used for an operation.
userAssignedIdentity	string	User assigned identity to be used for an operation if operationIdentityType is UserAssigned.

AzureMonitorAlertSettings

Object

Settings for Azure Monitor based alerts

Name	Type	Description
alertsForAllFailoverIssues	AlertsState
alertsForAllJobFailures	AlertsState
alertsForAllReplicationIssues	AlertsState

BackupStorageVersion

Enumeration

Backup storage version

Value	Description
V1
V2
Unassigned

BCDRSecurityLevel

Enumeration

Security levels of Recovery Services Vault for business continuity and disaster recovery

Value	Description
Poor
Fair
Good
Excellent

ClassicAlertSettings

Object

Settings for classic alerts

Name	Type	Description
alertsForCriticalOperations	AlertsState
emailNotificationsForSiteRecovery	AlertsState

CloudError

Object

An error response from Azure Backup.

Name	Type	Description
error	Error	The resource management error response.

CmkKekIdentity

Object

The details of the identity used for CMK

Name	Type	Description
useSystemAssignedIdentity	boolean	Indicate that system assigned identity should be used. Mutually exclusive with 'userAssignedIdentity' field
userAssignedIdentity	string	The user assigned identity to be used to grant permissions in case the type of identity used is UserAssigned

CmkKeyVaultProperties

Object

The properties of the Key Vault which hosts CMK

Name	Type	Description
keyUri	string	The key uri of the Customer Managed Key

createdByType

Enumeration

The type of identity that created the resource.

Value	Description
User
Application
ManagedIdentity
Key

CrossRegionRestore

Enumeration

Flag to show if Cross Region Restore is enabled on the Vault or not

Value	Description
Enabled
Disabled

CrossSubscriptionRestoreSettings

Object

Settings for Cross Subscription Restore Settings

Name	Type	Description
crossSubscriptionRestoreState	CrossSubscriptionRestoreState

CrossSubscriptionRestoreState

Enumeration

Value	Description
Enabled
Disabled
PermanentlyDisabled

EnhancedSecurityState

Enumeration

Value	Description
Invalid
Enabled
Disabled
AlwaysON

Error

Object

The resource management error response.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	Error[]	The error details.
message	string	The error message.
target	string	The error target.

ErrorAdditionalInfo

Object

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

IdentityData

Object

Identity for the resource.

Name	Type	Description
principalId	string	The principal ID of resource identity.
tenantId	string	The tenant ID of resource.
type	ResourceIdentityType	The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities.
userAssignedIdentities	<string, UserIdentity>	The list of user-assigned identities associated with the resource. The user-assigned identity dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.

IdentityType

Enumeration

Identity type that should be used for an operation.

Value	Description
SystemAssigned
UserAssigned

ImmutabilitySettings

Object

Immutability Settings of vault

Name	Type	Description
state	ImmutabilityState

ImmutabilityState

Enumeration

Value	Description
Disabled
Unlocked
Locked

InfrastructureEncryptionState

Enumeration

Enabling/Disabling the Double Encryption state

Value	Description
Enabled
Disabled

MonitoringSettings

Object

Monitoring Settings of the vault

Name	Type	Description
azureMonitorAlertSettings	AzureMonitorAlertSettings	Settings for Azure Monitor based alerts
classicAlertSettings	ClassicAlertSettings	Settings for classic alerts

MultiUserAuthorization

Enumeration

MUA Settings of vault

Value	Description
Invalid
Enabled
Disabled

PrivateEndpoint

Object

The Private Endpoint network resource that is linked to the Private Endpoint connection.

Name	Type	Description
id	string	Gets or sets id.

PrivateEndpointConnection

Object

Private Endpoint Connection Response Properties.

Name	Type	Description
groupIds	VaultSubResourceType[]	Group Ids for the Private Endpoint
privateEndpoint	PrivateEndpoint	The Private Endpoint network resource that is linked to the Private Endpoint connection.
privateLinkServiceConnectionState	PrivateLinkServiceConnectionState	Gets or sets private link service connection state.
provisioningState	ProvisioningState	Gets or sets provisioning state of the private endpoint connection.

PrivateEndpointConnectionStatus

Enumeration

Gets or sets the status.

Value	Description
Pending
Approved
Rejected
Disconnected

PrivateEndpointConnectionVaultProperties

Object

Information to be stored in Vault properties as an element of privateEndpointConnections List.

Name	Type	Description
id	string	Format of id subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.[Service]/{resource}/{resourceName}/privateEndpointConnections/{connectionName}.
location	string	The location of the private Endpoint connection
name	string	The name of the private Endpoint Connection
properties	PrivateEndpointConnection	Private Endpoint Connection Response Properties.
type	string	The type, which will be of the format, Microsoft.RecoveryServices/vaults/privateEndpointConnections

PrivateLinkServiceConnectionState

Object

Gets or sets private link service connection state.

Name	Type	Description
actionsRequired	string	Gets or sets actions required.
description	string	Gets or sets description.
status	PrivateEndpointConnectionStatus	Gets or sets the status.

ProvisioningState

Enumeration

Gets or sets provisioning state of the private endpoint connection.

Value	Description
Succeeded
Deleting
Failed
Pending

PublicNetworkAccess

Enumeration

property to enable or disable resource provider inbound network traffic from public clients

Value	Description
Enabled
Disabled

ResourceIdentityType

Enumeration

The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities.

Value	Description
SystemAssigned
None
UserAssigned
SystemAssigned, UserAssigned

ResourceMoveState

Enumeration

The State of the Resource after the move operation

Value	Description
Unknown
InProgress
PrepareFailed
CommitFailed
PrepareTimedout
CommitTimedout
MoveSucceeded
Failure
CriticalFailure
PartialSuccess

RestoreSettings

Object

Restore Settings of the vault

Name	Type	Description
crossSubscriptionRestoreSettings	CrossSubscriptionRestoreSettings	Settings for CrossSubscriptionRestore

SecureScoreLevel

Enumeration

Secure Score of Recovery Services Vault

Value	Description
None
Minimum
Adequate
Maximum

SecuritySettings

Object

Security Settings of the vault

Name	Type	Description
immutabilitySettings	ImmutabilitySettings	Immutability Settings of a vault
multiUserAuthorization	MultiUserAuthorization	MUA Settings of a vault
softDeleteSettings	SoftDeleteSettings	Soft delete Settings of a vault
sourceScanConfiguration	SourceScanConfiguration	Source scan configuration of vault

Sku

Object

Identifies the unique system identifier for each Azure resource.

Name	Type	Description
capacity	string	The sku capacity
family	string	The sku family
name	SkuName	Name of SKU is RS0 (Recovery Services 0th version) and the tier is standard tier. They do not have affect on backend storage redundancy or any other vault settings. To manage storage redundancy, use the backupstorageconfig
size	string	The sku size
tier	string	The Sku tier.

SkuName

Enumeration

Name of SKU is RS0 (Recovery Services 0th version) and the tier is standard tier. They do not have affect on backend storage redundancy or any other vault settings. To manage storage redundancy, use the backupstorageconfig

Value	Description
Standard
RS0

SoftDeleteSettings

Object

Soft delete Settings of vault

Name	Type	Description
enhancedSecurityState	EnhancedSecurityState
softDeleteRetentionPeriodInDays	integer (int32)	Soft delete retention period in days
softDeleteState	SoftDeleteState

SoftDeleteState

Enumeration

Value	Description
Invalid
Enabled
Disabled
AlwaysON

SourceScanConfiguration

Object

Source scan configuration of vault

Name	Type	Description
sourceScanIdentity	AssociatedIdentity	Identity details to be used for an operation
state	State

StandardTierStorageRedundancy

Enumeration

The storage redundancy setting of a vault

Value	Description
Invalid
LocallyRedundant
GeoRedundant
ZoneRedundant

State

Enumeration

Value	Description
Invalid
Enabled
Disabled

systemData

Object

Metadata pertaining to creation and last modification of the resource.

Name	Type	Description
createdAt	string (date-time)	The timestamp of resource creation (UTC).
createdBy	string	The identity that created the resource.
createdByType	createdByType	The type of identity that created the resource.
lastModifiedAt	string (date-time)	The timestamp of resource last modification (UTC)
lastModifiedBy	string	The identity that last modified the resource.
lastModifiedByType	createdByType	The type of identity that last modified the resource.

TriggerType

Enumeration

The way the vault upgrade was triggered.

Value	Description
UserTriggered
ForcedUpgrade

UpgradeDetails

Object

Details for upgrading vault.

Name	Type	Description
endTimeUtc	string (date-time)	UTC time at which the upgrade operation has ended.
lastUpdatedTimeUtc	string (date-time)	UTC time at which the upgrade operation status was last updated.
message	string	Message to the user containing information about the upgrade operation.
operationId	string	ID of the vault upgrade operation.
previousResourceId	string	Resource ID of the vault before the upgrade.
startTimeUtc	string (date-time)	UTC time at which the upgrade operation has started.
status	VaultUpgradeState	Status of the vault upgrade operation.
triggerType	TriggerType	The way the vault upgrade was triggered.
upgradedResourceId	string	Resource ID of the upgraded vault.

UserIdentity

Object

A resource identity that is managed by the user of the service.

Name	Type	Description
clientId	string	The client ID of the user-assigned identity.
principalId	string	The principal ID of the user-assigned identity.

Vault

Object

Resource information, as returned by the resource provider.

Name	Type	Description
etag	string	etag for the resource.
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
identity	IdentityData	Identity for the resource.
location	string	The geo-location where the resource lives
name	string	The name of the resource
properties	VaultProperties	Properties of the vault.
sku	Sku	Identifies the unique system identifier for each Azure resource.
systemData	systemData	Azure Resource Manager metadata containing createdBy and modifiedBy information.
tags	object	Resource tags.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

VaultPrivateEndpointState

Enumeration

Private endpoint state for backup.

Value	Description
None
Enabled

VaultProperties

Object

Properties of the vault.

Name	Type	Description
backupStorageVersion	BackupStorageVersion	Backup storage version
bcdrSecurityLevel	BCDRSecurityLevel	Security levels of Recovery Services Vault for business continuity and disaster recovery
encryption	VaultPropertiesEncryption	Customer Managed Key details of the resource.
monitoringSettings	MonitoringSettings	Monitoring Settings of the vault
moveDetails	VaultPropertiesMoveDetails	The details of the latest move operation performed on the Azure Resource
moveState	ResourceMoveState	The State of the Resource after the move operation
privateEndpointConnections	PrivateEndpointConnectionVaultProperties[]	List of private endpoint connection.
privateEndpointStateForBackup	VaultPrivateEndpointState	Private endpoint state for backup.
privateEndpointStateForSiteRecovery	VaultPrivateEndpointState	Private endpoint state for site recovery.
provisioningState	string	Provisioning State.
publicNetworkAccess	PublicNetworkAccess	property to enable or disable resource provider inbound network traffic from public clients
redundancySettings	VaultPropertiesRedundancySettings	The redundancy Settings of a Vault
resourceGuardOperationRequests	string[]	ResourceGuardOperationRequests on which LAC check will be performed
restoreSettings	RestoreSettings	Restore Settings of the vault
secureScore	SecureScoreLevel	Secure Score of Recovery Services Vault
securitySettings	SecuritySettings	Security Settings of the vault
upgradeDetails	UpgradeDetails	Details for upgrading vault.

VaultPropertiesEncryption

Object

Customer Managed Key details of the resource.

Name	Type	Description
infrastructureEncryption	InfrastructureEncryptionState	Enabling/Disabling the Double Encryption state
kekIdentity	CmkKekIdentity	The details of the identity used for CMK
keyVaultProperties	CmkKeyVaultProperties	The properties of the Key Vault which hosts CMK

VaultPropertiesMoveDetails

Object

The details of the latest move operation performed on the Azure Resource

Name	Type	Description
completionTimeUtc	string (date-time)	End Time of the Resource Move Operation
operationId	string	OperationId of the Resource Move Operation
sourceResourceId	string	Source Resource of the Resource Move Operation
startTimeUtc	string (date-time)	Start Time of the Resource Move Operation
targetResourceId	string	Target Resource of the Resource Move Operation

VaultPropertiesRedundancySettings

Object

The redundancy Settings of a Vault

Name	Type	Description
crossRegionRestore	CrossRegionRestore	Flag to show if Cross Region Restore is enabled on the Vault or not
standardTierStorageRedundancy	StandardTierStorageRedundancy	The storage redundancy setting of a vault

VaultSubResourceType

Enumeration

Subresource type for vault AzureBackup, AzureBackup_secondary or AzureSiteRecovery

Value	Description
AzureBackup
AzureBackup_secondary
AzureSiteRecovery

VaultUpgradeState

Enumeration

Status of the vault upgrade operation.

Value	Description
Unknown
InProgress
Upgraded
Failed

Share via

Vaults - Create Or Update

URI Parameters

Request Header

Request Body

Responses

Security

azure_auth

Scopes

Examples

Create or Update Recovery Services vault

Sample request

Sample response

Create or Update Vault performing critical operation With MUA

Sample request

Sample response

Create or Update Vault with CustomerManagedKeys

Sample request

Sample response

Create or Update Vault With Monitoring Setting

Sample request

Sample response

Create or Update Vault With Redundancy Setting

Sample request

Sample response

Create or Update Vault with Source scan configuration

Sample request

Sample response

Create or Update Vault with User Assigned Identity

Sample request

Sample response

Definitions

AlertsState

AssociatedIdentity

AzureMonitorAlertSettings

BackupStorageVersion

BCDRSecurityLevel

ClassicAlertSettings

CloudError

CmkKekIdentity

CmkKeyVaultProperties

createdByType

CrossRegionRestore

CrossSubscriptionRestoreSettings

CrossSubscriptionRestoreState

EnhancedSecurityState

Error

ErrorAdditionalInfo

IdentityData

IdentityType

ImmutabilitySettings

ImmutabilityState

InfrastructureEncryptionState

MonitoringSettings

MultiUserAuthorization

PrivateEndpoint

PrivateEndpointConnection

PrivateEndpointConnectionStatus

PrivateEndpointConnectionVaultProperties

PrivateLinkServiceConnectionState

ProvisioningState

PublicNetworkAccess

ResourceIdentityType

ResourceMoveState

RestoreSettings

SecureScoreLevel

SecuritySettings

Sku

SkuName

SoftDeleteSettings

SoftDeleteState

SourceScanConfiguration

StandardTierStorageRedundancy

State

systemData

TriggerType

UpgradeDetails

UserIdentity

Vault

VaultPrivateEndpointState