Data Backed Up in Entra ID

Microsoft Entra ID is an Identity as a Service (IDaaS) solution, a cloud-based identity and access management service that Microsoft users can use to access external resources. Example resources include Microsoft 365, the Azure portal, and thousands of other SaaS applications. Microsoft Entra ID also helps users access internal resources like apps on in their organizational intranet, and any cloud apps developed for their organization.

To learn the differences between Active Directory and Microsoft Entra ID, see Compare Active Directory to Microsoft Entra ID. You can also refer to Microsoft Cloud for Enterprise Architects Series posters to better understand the core identity services in Azure like Microsoft Entra ID and Microsoft 365.

The following tables describe the Entra ID objects protected by Barracuda Cloud-to-Cloud Backup.

Entra ID Backup

• Users

• Groups

• Administrative Units

• Roles

Entra ID Backup Premium

• App Registrations

• Audit Logs

• Authentication Method Policies

• Authentication Strength Policies

• BitLocker Keys

• Conditional Access Policies

• Device Management

  • Device Compliance Policies

  • Device Configuration Policies

• Enterprise Applications

• Local Administrator Passwords (LAPS)

• Named Locations

Entra ID Backup

Users

User objects are digital profiles that represent people in an organization. These profiles store important information about each user, such as their name, email address, job title, and permissions.

For example, a user object might include:

• The user’s login credentials (username and password).

• Their role (e.g., regular employee or admin).

• Groups they belong to (e.g., "Sales Team").

• Access permissions for apps and data.

User objects are like ID cards in the digital world, helping the system know who someone is and what they are allowed to do.

Groups

Group objects are digital collections of users, devices, or other groups that help manage access to apps, data, and resources more efficiently.

For example:

• Instead of giving access to an app to 50 employees one by one, you can add all 50 to a group and assign the app to the group.

• Groups can also be used to apply specific policies, like blocking access from certain locations.

There are two main types of groups in Entra ID:

1. Security groups: Used to control access to resources (e.g., files, apps).

2. Microsoft 365 groups: Used for collaboration (e.g., in Teams, SharePoint).

Mail-Enabled Groups and Distribution Groups are primarily managed in Exchange Online or the Microsoft 365 Admin Center, rather than directly in Entra ID.

Group objects are like "folders" for people and devices, making it easier to organize and manage access.

Administrative Units

Administrative units are containers in Entra ID used to restrict administrative scope. They allow organizations to delegate permissions to manage a specific subset of users, groups, or devices.

For example, a user object might include:

• The user’s login credentials (username and password).

• Their role (e.g., regular employee or admin).

• Groups they belong to (e.g., "Sales Team").

• Access permissions for apps and data.

User objects are like ID cards in the digital world, helping the system know who someone is and what they are allowed to do.

Roles

Roles are like job titles that define what someone is allowed to do in your organization’s systems.

For example:

• If you want someone to manage user accounts but not have access to billing information, you can assign them a User Administrator role. If someone needs full control over all settings, you can assign them the Global Administrator role.

Roles come with specific permissions that determine what tasks a person can perform, helping you control access and responsibilities.

Roles are how you assign the right level of access to people, so they can do their job without having unnecessary permissions.

Entra ID Backup Premium Objects

The Entra ID Backup Premium tier supports the backup and restore of the following attributes for each object type, where possible.