Feature Request: Azure AD backup

[claraspital]

hi there

is there a plan for backuping azure ad with veeam?

[HannesK]

Hello,
to understand your request better: you have no local AD anymore. You only use Azure AD?

Best regards,
Hannes

PS: to answer your question: no short-term plans

[seo]

Hi

Need this one.
Anyone know any solutions available?
I have seen Quest On Demand Recovery, any more?

[nielsengelen]

Svein, it would be good to know what you actually need to protect so we can look at it and add it to our roadmap.

[seo]

Hi,
Thanks for rapid response.
Backup and recovery of objects in Azure AD only. Like users, guest users, security groups with members etc
Object synced with Azure AD connect is covered by on-prem backup but Azure AD only objects is uncovered by backup.

[AlexLudwig-ITDienst]

Hi,

i know this post is a little bit older, but i'm also interested in this feature.
Many of our customers has some Cloud Only Users, Guest Users and Groups so it would be very helpfull if they could be secured as well.

[nielsengelen]

Thanks for the request Alex on your requirements.

[Didi7]

So after more than 2 years the original request has now been re-requested and acknowledged? Has there been any development regarding pure Azure AD backup or is there a lack of API from Microsoft site to be able to backup Azure AD objects? As far as I could find out, one of your competitors is now able to offer a solution in the meantime? What about Veeam? I saw Veeam Backup for Azure is now able to backup Azure SQL as well, so a possible Azure AD backup solution might suit best in Veeam Backup for Azure, correct or not? Or maybe that's pure speculation and nothing more happened than the request is on a todo list?

[nielsengelen]

There are certain API’s available however not everything (from what we hear as requests) is available. It’s definitely a fast-growing request since recently (last year or so) as before the amount of requests were fairly low. We can state that the impact of the pandemic has surged the need for it. There are currently no direct plans to release something between now and 6 months from now.

It would be great if u could share what your requirements and pain points are as well.

[Didi7]

To be honest, we still have a dedicated domain environment in the cloud as IaaS and On-Prem. I was just interested, what people use to backup Azure AD, if this is the only domain infrastructure they have.

[bci-mick-levin]

+1

[cthorpe]

+1 With more and more of our customers moving to Modern Workplace, the need to protect Azure AD objects (users, groups, roles) and understand who and when changes have been made, is becoming critical. A number of your competitors are now offering this ... when will Veeam ?

[Peejay62]

+1. Today I realized that we have a gap in backup. We have some internal development that uses Azure AD only. A request to restore a (unintended) deleted object could obviously not be honoured.. Also in our environment it's becoming more critical.

[gwignall]

+1 We're starting to get asked about this more and more from our customers. Seems an obvious gap to fill.

[mit.extrico]

Hi,

As I can see this has been an ongoing request for some time now.
I can support the need of this feature has to be prioritized. I have customers that request this feature and for them the backup of their AzureAD is system critical.
Further I can tell I have lost cases due to this missing feature and the customer has choosen alternatives to VEEAM - as commvault, keepit etc.

Hopefully there will be a solution to this gab in the product.

Regards

Michael

[Switchie_Urs]

+1

We as service provicers also have customers requesting AAD backup functionality. personally I would like to see objects like eg. conditional access policies backed up and restorable

Urs

[RayS]

I would like to also add interest in this.

To add to what's already been mentioned in this thread, a comprehensive backup and recovery of both individual objects and full restore to point-in-time. This should provide item-level restore as well.

One thing mentioned by a competitor, if using Azure AD Connect to synchronize objects from on-prem AD to Azure AD, simply re-synchronizing the object isn't good enough. That object can be synchronized with a new UUID and will not maintain any previous state, roles or permissions. A backup of the object in AAD and synchronization state with the on-prem object is necessary.

Things that should be backed up and recoverable in AAD to protect against deletion or unrecoverable misconfigurations:
- AAD Tenant Properties
- Users
- Groups
- External Identities
- Roles and Administrators (custom roles, assignments, IAM policy)
- Administrative Units
- Enterprise applications (user settings, registrations, application objects and permissions, service principal objects, admin consent)
- Devices (settings and all objects, bitlocker keys, Intune policies and settings)
- App registrations (application objects, api settings, keys and certificates, permission)
- Licenses (users and group assignments)
- Conditional access policies
- Company branding
- Custom domain names
- Intune (would be amazing, even if an entirely different or bundled product)
- User settings
- Security (conditional access, identity protection, named locations, MFA, certificate authorities)

And this is just what I use, I'm sure others have more or different requirements based on their company needs.

TL;DR
If it's an object that can be deleted or configuration that can be misconfigured, it should be restorable to a previous state.

[nielsengelen]

Hi Ray,

Clear detailed request! Thanks.

Currently, I can't provide an ETA for it though but your voice is heard for sure.

[andreas.karl@sws.de]

Hi Community and Veeam!

I am often asked by our customers whether we can also back up Azure AD objects (users, groups, enterprise applications, etc.) with our VBO365 solution. Unfortunately, I always have to deny this.

The competition (Manage Engine, Quest, etc.) already offer solutions here. Is the topic of AAD backup at Veeam already on the agenda?

Thanks!

Andreas

[nielsengelen]

Hi @andreas.karl@sws.de,

I've merged your post with an existing topic around the topic. It's for sure on our roadmap but no direct ETA for now.

[cjonespti]

@nielsengelen how do we put some weight behind this request. We had a need today to restore some security groups in Azure AD but since Veeam does not support this yet we were left re-creaing the groups manually. Hopefully this is high on the list in terms of priority.

[nielsengelen]

@cjonespti we are aware of the need for it. Your vote is counted for.

[rdixon01]

We have a Hybrid Azure AD. We're looking for Veeam capabilities to backup our Azure AD that included backup Azure AD objects that are created in AZure AD. Is this on Veeam's roadmap?

[nielsengelen]

The same answer still applies. No ETA for this feature or product but it is on our roadmap.

[Andres.Chacon]

I know you have said it is in the roadmap, but I would like to add my vote to this need, as I have also lost business because of this functionality to products like Netvault from Quest.

[DanielJ]

Now I too got this request from a large customer, so consider this a +1 for supporting backup of Azure AD.

[clo101]

and ofcourse Veeam should be the leader it having this!

[c02]

+100 - please push this feature as our customers request it and other market competitors offer it. thank you!

[ijross]

This is definitely a feature needed for Veeam.
Avepoint already does it and more.

[Vegarbass]

+1 from here, too. Would hate to either mock this up in PS or use a competing product.

But this is sorely needed, just think of BitLocker keys, policies, profiles, apps, scripts... ugh, this would take some serious time to reconstruct. (I know, I should have a backup-solution for this in place already, just been crossing fingers and hoping Veeam could deliver)