Data Backed Up in Entra ID
Microsoft Entra ID is an Identity as a Service (IDaaS) solution, a cloud-based identity and access management service that Microsoft users can use to access external resources. Example resources include Microsoft 365, the Azure portal, and thousands of other SaaS applications. Microsoft Entra ID also helps users access internal resources like apps on in their organizational intranet, and any cloud apps developed for their organization.
To learn the differences between Active Directory and Microsoft Entra ID, see Compare Active Directory to Microsoft Entra ID. You can also refer to Microsoft Cloud for Enterprise Architects Series posters to better understand the core identity services in Azure like Microsoft Entra ID and Microsoft 365.
Cloud-to-Cloud Backup for Entra ID supports the cloud-based version of Entra ID. Windows Server Active Directory & Hybrid environments are not currently supported.
The following tables describe the Entra ID objects protected by Barracuda Cloud-to-Cloud Backup.
Entra ID Backup
Users
User objects are digital profiles that represent people in an organization. These profiles store important information about each user, such as their name, email address, job title, and permissions.
For example, a user object might include:
The user’s login credentials (username and password).
Their role (e.g., regular employee or admin).
Groups they belong to (e.g., "Sales Team").
Access permissions for apps and data.
User objects are like ID cards in the digital world, helping the system know who someone is and what they are allowed to do.
Groups
Group objects are digital collections of users, devices, or other groups that help manage access to apps, data, and resources more efficiently.
For example:
Instead of giving access to an app to 50 employees one by one, you can add all 50 to a group and assign the app to the group.
Groups can also be used to apply specific policies, like blocking access from certain locations.
There are two main types of groups in Entra ID:
Security groups: Used to control access to resources (e.g., files, apps).
Microsoft 365 groups: Used for collaboration (e.g., in Teams, SharePoint).
Mail-Enabled Groups and Distribution Groups are primarily managed in Exchange Online or the Microsoft 365 Admin Center, rather than directly in Entra ID.
Group objects are like "folders" for people and devices, making it easier to organize and manage access.
Administrative Units
User objects are digital profiles that represent people in an organization. These profiles store important information about each user, such as their name, email address, job title, and permissions.
For example, a user object might include:
The user’s login credentials (username and password).
Their role (e.g., regular employee or admin).
Groups they belong to (e.g., "Sales Team").
Access permissions for apps and data.
User objects are like ID cards in the digital world, helping the system know who someone is and what they are allowed to do.
Roles
Roles are like job titles that define what someone is allowed to do in your organization’s systems.
For example:
If you want someone to manage user accounts but not have access to billing information, you can assign them a User Administrator role. If someone needs full control over all settings, you can assign them the Global Administrator role.
Roles come with specific permissions that determine what tasks a person can perform, helping you control access and responsibilities.
Roles are how you assign the right level of access to people, so they can do their job without having unnecessary permissions.
Entra ID Backup Premium Objects
The Entra ID Backup Premium tier supports the backup and restore of the following attributes for each object type, where possible.
In order to back up the objects within Entra ID, you must have a P1 or P2 license applied to your tenant. For more information on Entra ID and the license types, see https://learn.microsoft.com/en-us/entra/fundamentals/whatis.
Backing up Windows LAPS credentials also requires that your Entra ID Backup connection is configured for Entra ID Backup Premium and reauthorized with the additional permissions needed to read device local credentials.
App Registrations
App registrations are like creating a digital ID for an app so it can securely connect to your organization's systems or other services. This process allows apps to access resources, like user data or APIs, in a controlled and secure way.
For example:
If your company has a custom app that needs to access Microsoft 365 data (like calendars or emails), you’d register the app in Entra ID.
During registration, the app gets credentials (like a username and password for apps) and permissions (what the app is allowed to do).
App registrations are how you let apps "log in" and securely interact with your organization’s data, just like users have to.