Azure Active Directory backup

[Taen keren]

Hi 

Do one need to consider external backup solution of AAD when having multiple tenants? - can't seem to find any regarding this "topic" in the CAF ?    

[#2]

No. Backup and DR are Microsoft's responsibility. Only scenario that might bring such needs is unwanted configuration changes, but considering 99% of the settings can only be changed by admins, you can control that. You can also monitor the audit log to capture "unwanted" changes and revert them as needed.

[#3]

Hi Vasil

Thanks for your reply

what if the enterprise is compromised and hackers takes down the AD tenant...(sounds crazy - but just worst case scenario :)

[#4]

How will backup help you with that? :) Better focus on securing your tenant, especially admin accounts. But if you are willing to spend $$$, I'm sure there are at least few vendors out there offering backup for AAD.

[#5]

Indeed. I would also recommend to secure your Azure AD Tenant using P2 together with PIM and Least Privilege. Also go in Governance in General for Azure and Microsoft 365 Services.

[#6]

I read was has been stated :)

What about backup/restoring of Service Principals, AAD Security groups etc...and from a MSP point of view?

[#7]

You will have to rely on the different bins (30 days for security Groups and App Registrations).
Microsoft is slowly adding bin / restoration of deleted items but this is not backup. Governance will be the key.

[#8]

Hi @thijoubertold - Service principals are they "restoreable" through the bin?

[#9]

@Taen keren, yes indeed : 

How to: Restore or remove a recently deleted application with the Microsoft identity platform - Micr...