Understanding the Entra ID not protected by backup risk
The detection of this risk is based on identifying known backup solutions. If you use a backup solution that is not in the allow list, the risk may still appear even though your data is protected. If you have a backup solution in place, you can accept the risk by following the procedure in Accepting risks and setting risk reminders.
The Entra ID not protected by backup risk indicates that BarracudaONE has not detected backup coverage for your Entra ID identity data:
Users — User accounts and profiles
Groups — Security groups and Microsoft 365 groups
Administrative roles — Global administrators and other privileged accounts
Conditional access policies — Access control rules and policies
Why this a risk
Entra ID is the foundation of your identity and access management. Without backup protection, you risk losing:
User accounts and authentication credentials
Group memberships and access permissions
Security policies and conditional access rules
Administrative role assignments
Recovering from Entra ID data loss can be time-consuming and may require manual reconstruction of identities, groups, and policies. This can result in service disruption and security gaps.
Identifying this risk
To help you identify the tools affected, BarracudaONE displays:
User count — Number of user accounts at risk
Group count — Number of groups that could be lost
Global admin count — Number of privileged administrator accounts at risk
Conditional access policy count — Number of security policies at risk
Resolving this risk
To resolve this risk, you can:
Activate Cloud-to-Cloud Backup — Configure a Cloud-to-Cloud Backup vault for Entra ID data sources. The risk resolves automatically. For more information, see https://documentation.campus.barracuda.com/wiki/x/UoAx.
Deploy a third-party backup solution — Install and configure a recognized backup vendor for Entra ID. You can then click Accept risk.
Start a Cloud-to-Cloud Backup trial. To start a Cloud-to-Cloud Backup trial, follow the procedure below.
To resolve this risk
In the Risks section, do one of the following:
Select the Entra ID not protected by backup risk.
Select another risk, then use the arrows to navigate to the Entra ID not protected by backup risk.
Click the Fix for me button and follow the steps to resolve the risk.
If you have Cloud-to-Cloud Backup in your environment, when you click the Fix for me button, the risk goes into the Pending state for 24 hours. If you don’t have Cloud-to-Cloud Backup, and are resolving this risk by starting a trial, when you click Continue to setup, the risk goes into the Pending state for 24 hours. If you follow the steps to resolve the risk, when the risk is synced, it will go into the Resolved state. If you do not resolve the risk within 24 hours, it returns to the Unresolved state.
Once you have resolved this risk
Once you put a tool in place to back up your Entra ID data sources, you can feel secure that accidental deletion, ransomware or attacks, policy gaps, and other account compromise issues can be resolved quickly, with a minimum of time and expense by your organization.