Question about backup in Azure Active Directory

%3CLINGO-SUB%20id%3D%22lingo-sub-1151946%22%20slang%3D%22en-US%22%3EQuestion%20about%20backup%20in%20Azure%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1151946%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20work%20more%20and%20more%20in%20Azure%20Active%20Directory%26nbsp%3Band%20have%20already%20made%20some%20configurations.%3C%2FP%3E%3CP%3EI%20now%20ask%20myself%20the%20question%2C%20how%20can%20I%20Backup%20our%20work%3F%3C%2FP%3E%3CP%3EExample%20of%20what%20I%20want%20to%20save%3A%3C%2FP%3E%3CP%3E-%26nbsp%3BConfigured%20Dynamic%20membership%20rules%20for%20groups%20in%20Azure%20Active%20Directory%3C%2FP%3E%3CP%3E-%26nbsp%3BConditional%20Access%20policies%20in%20Azure%20AD%3C%2FP%3E%3CP%3E-%20MFA%20Configuration%3C%2FP%3E%3CP%3E-%20Azure%20Active%20Directory%20(We%20automate%20settings%20with%20Graph)%3C%2FP%3E%3CP%3E-%26nbsp%3BOr%20also%20create%20surveys%20in%20Forms%20in%20Office%20365%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20very%20curious%20what%20your%20opinion%20is%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1151946%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1151980%22%20slang%3D%22en-US%22%3ERe%3A%20Question%20about%20backup%20in%20Azure%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1151980%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20you%20are%20already%20familiar%20with%20the%20Graph%20(or%20PowerShell)%2C%20just%20use%20it%20to%20export%20a%20%22snapshot%22%20of%20the%20current%20configuration%20for%20any%20features%20you%20care%20about.%20There%20are%20no%20%22backups%22%20per%20se%20in%20AAD%2C%20making%20sure%20the%20service%20is%20up%20and%20running%20and%20recovering%20in%20the%20event%20of%20a%20disaster%20is%20Microsoft's%20responsibility%2C%20not%20yours.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1152057%22%20slang%3D%22en-US%22%3ERe%3A%20Question%20about%20backup%20in%20Azure%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1152057%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20your%20answer.%3C%2FP%3E%3CP%3EDisaster%20Recovery%20is%20of%20course%20also%20an%20topic.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20RBAC%20in%20use.%3C%2FP%3E%3CP%3EWhat%20happens%20if%20a%20%22power%20user%22%20changes%20a%20setting%2C%20no%20documentation%20is%20available%2C%20and%20nobody%20remembers%20what%20the%20setting%20was%3F%3C%2FP%3E%3CP%3EOr%20especially%20with%20Dynamic%20Azure%20AD%20groups%2C%20with%20many%20groups%20the%20specifications%20are%20not%20always%20transparent%20for%20us.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20look%20at%20snapshots%20with%20graph%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20everything%20runs%2C%20then%20that%20is%20great.%20But%20if%20it%20doesn't%2C%20the%20questions%20come%20%3B)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1153178%22%20slang%3D%22en-US%22%3ERe%3A%20Question%20about%20backup%20in%20Azure%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1153178%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20Audit%20logs%20should%20cover%20(most%20of)%20the%20changes.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

We work more and more in Azure Active Directory and have already made some configurations.

I now ask myself the question, how can I Backup our work?

Example of what I want to save:

- Configured Dynamic membership rules for groups in Azure Active Directory

- Conditional Access policies in Azure AD

- MFA Configuration

- Azure Active Directory (We automate settings with Graph)

- Or also create surveys in Forms in Office 365

 

I am very curious what your opinion is

 

 

3 Replies
Highlighted

If you are already familiar with the Graph (or PowerShell), just use it to export a "snapshot" of the current configuration for any features you care about. There are no "backups" per se in AAD, making sure the service is up and running and recovering in the event of a disaster is Microsoft's responsibility, not yours.

Highlighted

Thanks for your answer.

Disaster Recovery is of course also an topic.

 

We have RBAC in use.

What happens if a "power user" changes a setting, no documentation is available, and nobody remembers what the setting was?

Or especially with Dynamic Azure AD groups, with many groups the specifications are not always transparent for us.

 

I look at snapshots with graph

 

If everything runs, then that is great. But if it doesn't, the questions come ;)

 

Highlighted

The Audit logs should cover (most of) the changes.