About Data Protection and Snapshots : About protection groups and policy customization
  
About protection groups and policy customization
The server-level backup policy wizard is a quick and simple way to configure server-level backup policies using best practices for data protection in a product deployment. The wizard is designed to ensure that the correct scope (relevant LUNs and proxy) is applied for each server, whether it is a specific server or an Edge hosting multiple servers.
A protection group is the underlying construct that Core uses to map the server, VMs, and LUNs that are being protected. It contains the information associated with the backup policy, the server that is being protected, and the proxy host used for the backup.
A protection group is mapped to a particular server. This mapping applies to each server instance that exists in a backup policy, whether the policy is for an individual server or for an Edge that has multiple protected VMs.
You can view the protection groups from the CLI on the Core by using the show storage backup group all command.
Occasionally, it may be necessary to customize a policy. For example, an Edge may have five VMs but it is required only to protect a selection of the VMs. Configuring a policy for the Edge using the wizard will automatically ensure all five VMs are protected on the Edge as a best practice.
Once the policy is created, you can modify it using the CLI on the Core. Using our example of the Edge with five VMs, you could modify the policy so that only two of the five VMs are protected. Alternatively, a slightly different syntax to the same command could be used to exclude two of the five VMs from being protected:
storage backup group modify <group-id> membership selected members <vm-list>
storage backup group modify <group-id> membership all exclude <vm-list>
There are additional options for this command that allow modification of other policy parameters such as quiesce lists and backup history.