Close Azure VM file-recovery access after copying the required files

Source facts

The Azure VM file-recovery script provides read-only recovery-point access and is valid for 12 hours. Unmounting that recovery point invalidates the script immediately, rather than waiting for its validity period to end. Microsoft warns that leaving the connection open can disrupt a subsequent backup of the recovery machine. On Linux, disconnected mount paths can remain visible as orphan volumes until explicitly cleaned. Microsoft Learn.

Applicability

This file-recovery path is for Resource Manager Azure VMs protected to a Recovery Services vault; encrypted VM backups are excluded. Check the recovery machine’s documented operating-system, storage, and network compatibility before starting.

DSE recommendation

Give each file-recovery session an owner and an explicit closeout step. Track the chosen recovery point, approved destination, and files to recover without distributing the access script or password broadly. After the copy is accepted, close the connection through the documented unmount action. Keep Linux mount cleanup distinct from revoking access; use the documented cleanup procedure only for the recovery session’s mounts.

Verification

Confirm the requested files are readable at the approved destination, then verify unmount completion and any required local cleanup. If the recovery machine is itself backed up, check its next backup result. Preserve evidence of completion without retaining recovery credentials in the general ticket.

Official references

Microsoft Learn: Recover files and folders from Azure VM backup.