Exceeding the hard quota for backup storage
Regarding the backup storage, its hard quota can be exceeded to two times the defined hard quota. The protection agent certificate has the 2x technical quota that allows an agent to overcome the tenant's hard quota when it is not yet reached during a running backup. The next backup will not be possible if the tenant quota is exceeded. If the 2x multiplied value of the quota (in the certificate) is reached during backup creation, then the backup will fail.
Example: You have defined the cloud storage hard quota of 100 TB for a customer tenant which means that the total sum of hard quotas allocated to the tenant's users cannot exceed 100 TB. You decided to split the hard quota for the two users equally. This means that technically each user's agent has a 100 TB technical quota. But it does not mean that the agent can back up machines until all 100 TB are reached. It means only that if the hard quota is almost reached when the backup creation started, then the backup will be completed unless its size is too big that even the 2x hard quota is not enough.
On the scheme below, a user has 1 TB of free space, but the backup size is larger, for example, 3 TB. In this case, the backup will be successfully completed even though the hard quota limit of the cloud storage space is exceeded by 2 TB. If the backup size was 53 TB, then the backup creation would start but fail when the cloud storage limit (100 TB) is reached.