Feature Request: Azure AD backup

[nielsengelen]

Request noted, no ETA for now but we are well aware of the need for it. Thanks!

[kshaeta]

I would like to also add interest in this.

To add to what's already been mentioned in this thread, a comprehensive backup and recovery of both individual objects and full restore to point-in-time. This should provide item-level restore as well.

One thing mentioned by a competitor, if using Azure AD Connect to synchronize objects from on-prem AD to Azure AD, simply re-synchronizing the object isn't good enough. That object can be synchronized with a new UUID and will not maintain any previous state, roles or permissions. A backup of the object in AAD and synchronization state with the on-prem object is necessary.

Things that should be backed up and recoverable in AAD to protect against deletion or unrecoverable misconfigurations:
- AAD Tenant Properties
- Users
- Groups
- External Identities
- Roles and Administrators (custom roles, assignments, IAM policy)
- Administrative Units
- Enterprise applications (user settings, registrations, application objects and permissions, service principal objects, admin consent)
- Devices (settings and all objects, bitlocker keys, Intune policies and settings)
- App registrations (application objects, api settings, keys and certificates, permission)
- Licenses (users and group assignments)
- Conditional access policies
- Company branding
- Custom domain names
- Intune (would be amazing, even if an entirely different or bundled product)
- User settings
- Security (conditional access, identity protection, named locations, MFA, certificate authorities)

And this is just what I use, I'm sure others have more or different requirements based on their company needs.

TL;DR
If it's an object that can be deleted or configuration that can be misconfigured, it should be restorable to a previous state.

+100 on this.

This is something that, with 0365/Azure being over ten years old, I find INCREDIBLE that this has not been implemented by someone. Really, Microsoft should have created some backup for this YEARS ago, or provided API's for backup companies to tie and back up this information. Think of what could happen if you lost some of this information, or it was erased, intentionally, accidentally, or because of software/hardware failure.
From my understanding Microsoft provides no guarantee WHATSOEVER that your data is safe. You are responsible to back it up. I'm not sure what the guarantee is that the settings/configurations etc are backed up and recoverable as well, but if there is functionality built into M365/Azure, then it is not something I have come across.

Being able to recover your data is one thing, but if something has happened to the way you have setup and structured the settings/configurations, restoring your data may not work correctly.

And it should not be just a full backup. If i need to recover my inTune settings to a date 1 week ago, then I should be able to do so.

[cseeliger]

Hi team,
are there any plans to implement backup of EntraID within Veeam for M365? Several of our customers are asking about this functionality, because there are some other solutions in the market advertising with that feature.
Best regards
Christoph

[Mildur]

Hi Christoph

I moved your request to the existing topic. Please see the comment of my colleague.

Best,
Fabian

[StoopidMonkey]

Another +1!

This is something that would be extremely beneficial, ESPECIALLY if we can get a "Compare with Production" view in an Explorer to see what changed between a backup and the live environment.

[miklashenne]

+1

[mjr.epicfail]

Hi all,

Just giving this post another kick back to top.
Its been almost 6 months since last update.

Not sure if this has been mentioned before, but competitors are already filling this gap and I'd rather stay with the Veeam Ecosystem. However we have multiple request by resellers that they want this feature.
If Veeam can tell us when they plan to implement this feature too, that would be great.

[nielsengelen]

Hi Danny, we are aware of the requests and have plans but for now, no timing is available.

[Gostev]

We're in prototyping stage so timing is hard to guess at this point.

[thynes]

+1 On this too!
We're getting more and more customers asking for this and we're losing out to other providers with competitors products who can do this functionality

[SebastianB]

+1 I wonder why this is not implemented yet.

We are MSP and today we are struggling with deleted Entra ID Devies (manually delted by an "Admin", or more User with Admin Permissions ) and 2 User can't Log-In on there devices anymore.

If i think about our customers who have an azure ad/entra as the only only AD/Identity Management, it is painfull that this is not backed in any kind ...

I will now starting with implementing some Powershell Scripts (Entra Exporter and Entra ID Protector, see gitlb), but we need this in the existing Backup Solution soon!

[albertwt]

Yes, I am also interested in this feature, hopefully, this can be released in the near future.
with this feature release, it will be a very helpful feature.