#Microsoft Entra ID Data

To protect your Microsoft Entra ID environment using AvePoint Cloud Backup for IaaS + PaaS, follow these steps:

1. Connect your tenant.

   • If you want to protect your Microsoft Entra tenant via AvePoint services, your tenant owner or service administrators must first connect the tenant to AvePoint Online Services. See for details.

2. Configure the service app profile.

   • Set up the app profile for the service app required to protect Microsoft Entra. Use your Microsoft 365 Global Admin Account to consent to the application. See Create a Service App and Grant Consent for details.

3. Configure a service account profile.

   • Create a service account profile if you want to protect the following properties. For details on configuring a service account profile, refer to .

     • To back up and restore distribution lists or mail-enabled security groups in Microsoft Entra ID, you can choose to configure a service account profile for this tenant with a Global Administrator or Exchange Administrator user role, or you can go to the Azure portal to add this service app with the Exchange Administrators role. For details on assigning an app the Exchange administrator role, refer to .

     • To back up and restore the Attributes and Claims, Identifier (Entity ID), currentSingleSignOnMode, ParentAppId, or IsCustomApp of the SSO configuration for the enterprise applications, you must have a service account profile configured in the AvePoint Online Services interface and the service account you use must have the Application Administrator role.

4. Create the backup scope.

   • Navigate to Cloud Backup for IaaS + PaaS > Backup page and create a backup scope for the Microsoft Entra tenant that you want to protect. Define whether to protect the Sign-in log or Audit log, configure the backup start time, and ensure the data retention policy meets your organization’s needs. The backup job will run once a day. See Create a New Backup Scope for Microsoft Entra ID for details.

     *Note: During your trial subscription, you can protect one Microsoft Entra tenant without limitations on the number of objects included in the backup.

5. Monitor and manage backups.

   • Regularly monitor the backup status and ensure that backups are running as scheduled. See Monitor Your Backup for details.

   • Use the Backup Analysis report to monitor your backup statistics. See for details.

6. Test restores.

   • Periodically test the restore process to ensure that you can recover data quickly and accurately. See Microsoft Entra ID for details.

   • Compare backups to ensure you are restoring the correct files. See Use the Compare Method for details.