Backblaze Setup

Backblaze provides cloud backup and storage. This integration connects Junto to the Backblaze Partner API and Computer Backup API so the agent can manage Partner Groups, group members, and Computer Backup records during ticket work.

Scope

This integration covers Partner Groups, members, and Computer Backup records only. It does not access the B2 data plane -- it never returns B2 storage usage or spend data.

How Junto Connects

You connect Backblaze once for your organization using your Partner API master application key. After connecting, you map each Junto company to a specific Backblaze Group so the agent operates on the right customer's backups.

Prerequisites

• An approved Backblaze Partner API account
• A Master Application Key (ID and key) entitled to both the Partner (Groups) API and the Computer Backup API
• Admin access in Junto to configure integrations and manage mappings
• For creating members: the billing admin permission in Junto

Step 1: Get Your Master Application Key

1. Sign in to your Backblaze account for the approved Partner API account.
2. Locate your Master Application Key ID and Master Application Key.
3. Copy both values and store them securely.

The key must be entitled to both the Partner (Groups) and Computer Backup APIs. If either is missing, the connection test will fail.

Step 2: Configure in Junto

1. In Junto, go to Settings → Integrations → Backblaze.
2. Click Add Configuration and enter:
   • Master Application Key ID -- from Step 1.
   • Master Application Key -- from Step 1. Credentials are encrypted before storage and never shown again after saving.
3. Save, then use Test connection to verify. The test reports how many Groups are visible and whether an eligible Group is available.

Only one Backblaze configuration is supported per organization.

Step 3: Map Companies to Groups

1. On the configuration, open Group mapping.
2. Link each Junto company to its Backblaze Group. Each company maps to one Group, and each Group to one company.
3. Save mappings.

Eligible Groups

To be mappable -- and to allow member creation -- a Group must include both the Backup and Storage products. Groups missing either product can't be selected.

What the Agent Can Do

Once connected and mapped, the agent can manage groups, members, and backups for the mapped company. Write actions always require technician approval before the agent proceeds.

Groups & Members

Capability	Description	Risk Level
List Groups	Discover Partner Groups -- identity, products, and member count. Available across the organization or scoped to one company	Low
List Group Members	List the member accounts in a company's mapped Group	Low
Create Group Member	Add a new (billable) member to the mapped Group. Requires the billing admin permission; the Group must include both Backup and Storage products	High
Eject Group Member	Remove a member from the Group	High

Ejecting a member

Ejecting a member does not delete the account: existing application keys keep working, the member must reset their password and accept terms to regain access, and the member cannot be re-added through the Partner API afterward. The agent shows these consequences in the approval before proceeding.

Computer Backups

Capability	Description	Risk Level
List Computers	List active Computer Backup records for a member -- computer name and last-uploaded timestamp	Low
Delete Computer Backup	Permanently delete one active Computer Backup	High

High-impact actions -- creating or ejecting members, deleting a backup -- always require technician approval. For safety, the agent re-verifies the company's Group mapping at both approval and execution time and stops if the mapping changed in between.

Troubleshooting

• Test connection fails -- Re-check the Master Application Key ID and key. Confirm the key is entitled to both the Partner (Groups) and Computer Backup APIs; if either suite is missing, authentication fails.
• A Group can't be mapped -- The Group must include both the Backup and Storage products. Groups missing either product aren't eligible.
• Can't create a member -- Creating a billable member requires the billing admin permission, and the mapped Group must include both Backup and Storage products.
• The agent operates on the wrong customer -- Confirm each company is mapped to the correct Group (Step 3).