For years, recovering from accidental changes or misconfigurations in Entra meant leaning on audit logs, PowerShell scripts, or third-party backup tools, because native recovery did not exist in any meaningful way. That changes now!
With Microsoft Entra Backup and Recovery, Microsoft automatically creates daily backups of supported directory objects, including users, groups, applications, service principals, Conditional Access policies, authentication method policy, named locations, and more.
And recovery is flexible as well; you can restore an entire object class, a specific object type, or just a few individual object IDs.
- One detail I particularly like is that these backups are Microsoft-managed and cannot be disabled, deleted, or tampered with, even by an admin with full privileges.
- Before restoring anything, we can pull a difference report that shows exactly what changed, object by object, attribute by attribute, so you are never restoring blindly.
- It is included with Entra ID P1 and P2 licenses, so there is no extra cost for organizations already on those plans.
Announcement here: https://techcommunity.microsoft.com/blog/microsoft-entra-blog/microsoft-entra-backup-and-recovery-is-now-generally-available/4521997