Microsoft Entra ID

Overview

In brief

> [!IMPORTANT]

What Entra admins need to know

Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

Open on Microsoft Learn ↗

The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.

Microsoft Entra Backup and Recovery is a built-in backup and recovery solution that lets you recover critical Microsoft Entra directory objects to a previously known good state after accidental changes or security compromises. Supported objects include users, groups, apps, service principals, Conditional Access policies, named locations, authentication method policy, and partialselected authorization policy.policy settings. The solution also supports Agent ID because it consists of user and service principal objects with distinct types and characteristics.

How backups work

Microsoft Entra Backup and Recovery lets you:

  • View available backups: See a list of backups available in your Microsoft Entra tenant.
  • Create difference reports: Before recovering objects to a previous state, compare the current state of your tenant with a backup by creating a difference report.and review changed attributes and links.
  • Recover objects: Choose to recoverRecover all objectssupported objects, selected object types, or select objects byspecific object type or object ID.IDs.
  • Review recovery history: View completed and in-progress recovery operations for your tenant.

Organizations that use hybrid identity with Microsoft Entra ID can create difference reports to identify changes to objects synchronized from Active Directory Domain Services (AD DS). For certain object types, such as groups, you can move the source of authority from AD DS to the cloud. This makes all Microsoft Entra Backup and Recovery functionality available for those converted objects. Use an alternative solution to back up and recover objects managed in AD DS.

Soft-deleted supported objects can be restored for 30 days through soft-delete recovery processes. Backup and Recovery restores supported object and configuration state from retained backups and complements those processes.

Microsoft Entra Backup and Recovery doesn't support the recovery or re-creation of hard-deleted objects.

Use Microsoft Entra Backup and Recovery as part of a broader approach to recoverability that helps your organization be more resilient. For more information about limitations, hybrid scenarios, and recoverability best practices, see Supported objects and recoverable properties.