Microsoft Entra ID

Edit online

The backup service for Microsoft Entra ID supports protecting the app registrations, enterprise applications, administrative units, roles and administrators, groups, users, device – bitLocker recovery keys, audit logs, and sign-in logs.

Microsoft Entra ID data recovery supports restoring the app registrations, enterprise applications, administrative units, and roles and administrators to the original location. It also supports restoring groups and users to the original location or to a new location. Refer to the tables below for supported and unsupported components and attributes of the object types you can protect in the Microsoft Entra ID.

Microsoft Entra ID service supports protecting the Device – BitLocker Recovery Keys. You can copy the BitLocker key from the backup. After December 2023 release, the Microsoft Entra ID service can also protect the extension attributes of the following objects: Users, Groups, Administrative Units, App Registrations, and Devices.

Note: Due to the API limitation that some properties stored outside of the main data store for the resource are not supported as part of change tracking, the changes of some properties cannot be detected for incremental backup. Only a full backup can cover such changes. For more details on the limitation, refer to the Microsoft article: Change Tracking.