Admin Portal Settings

Admin Portal Settings data recovery service supports exporting the settings in Microsoft Entra ID, Microsoft 365 Defender admin center, Exchange admin center, and Intune admin center. Admin Portal Settings restore service can also restore some components to its original location. Refer to the table below for the settings that are protected by the Admin Portal Settings service.

PortalPortalComponents/PoliciesComponents/PoliciesExportRestore
Microsoft Entra IDSecurityNamed locationsNamed Locations and Trusted IP Addresses(*Note: MFA-named locations are unsupported for export or restore.)SupportedSupported
Microsoft Entra IDSecurityAuthentication methodsSecurity Settings/Policies > Auth MethodsSupportedUnsupported
Microsoft Entra IDSecurityConditional AccessConditional Access Policies*Note: The custom security attributes (Preview) that you can use to create or edit the filter rules for Cloud apps or actions are currently unsupported.SupportedSupported
Microsoft Entra IDCompany brandingCompany brandingCompany branding settingsSupportedUnsupported
Microsoft Entra IDGroupsGroupsGeneralSupportedSupported
Microsoft Entra IDGroupsGroupsExpirationSupportedSupported
Microsoft Entra IDGroupsGroupsNaming policy*Note: When you restore the group naming policy, the conflict resolution “Merge” will go with the overwrite approach.SupportedSupported
Microsoft 365 DefenderEmail collaborationThreat policiesAnti-spamSupportedSupported
Microsoft 365 DefenderEmail collaborationThreat policiesAnti-phishingSupportedSupported
Microsoft 365 DefenderEmail collaborationThreat policiesAnti-malwareSupportedSupported
Microsoft 365 DefenderEmail collaborationThreat policiesSafe Attachments*Note: Safe attachments are unsupported in the data center operated by 21Vianet in China.SupportedSupported
Microsoft 365 DefenderEmail collaborationThreat policiesSafe Links*Note: Safe links are unsupported in the data center operated by 21Vianet in China.SupportedSupported
ExchangeExchangePermissionExchange Management ScopeSupportedUnsupported
IntuneIntuneDevicesCompliance policiesSupportedSupported
IntuneIntuneDevicesConditional accessSupportedSupported
IntuneIntuneDevicesConfiguration profilesSupportedSupported
IntuneIntuneDevicesScriptsSupportedSupported
IntuneIntuneAppsApp protection policies*Note: The app protection policies configured for Windows Information Protection (WIP) using the Without enrollment management type are not supported.*Note: The restore of Data Recovery Agent certificate in Windows Information Protection (WIP) is unsupported.SupportedSupported
IntuneIntuneAppsApp configuration policiesSupportedSupported
IntuneIntuneEndpoint SecuritySecurity baselinesSupportedSupported
IntuneIntuneEndpoint SecurityEndpoint detection and responseSupportedSupported

Microsoft Entra ID (Named Location)

Please note that the tables exclusively list high-level settings and do not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Object NameObject TypeExportRestore
CountryNamedLocationModelCountriesAndRegionsSupportedSupported
CountryNamedLocationModelCountryLookupMethodSupportedSupported
CountryNamedLocationModelIncludeUnknownCountriesAndRegionsSupportedSupported
IpNamedLocationModelIpRangesSupportedSupported
IpNamedLocationModelIsTrustedSupportedSupported

Object Attributes

AttributesExportRestore
CreatedDateTimeSupportedUnsupported
ModifiedDateTimeSupportedUnsupported

Microsoft Entra ID (Authentication Configuration)

Please note that the tables exclusively list high-level settings and do not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Object NameObject TypeExportRestore
Fido2AuthenticationMethodConfigurationModelIsAttestationEnforcedSupportedUnsupported
Fido2AuthenticationMethodConfigurationModelIsSelfServiceRegistrationAllowedSupportedUnsupported
Fido2AuthenticationMethodConfigurationModelKeyRestrictionsSupportedUnsupported
AdditionalFeatureDataOfMSAuthenticatorMethodModelKeySupportedUnsupported
AdditionalFeatureDataOfMSAuthenticatorMethodModelStateSupportedUnsupported
AdditionalFeatureDataOfMSAuthenticatorMethodModelIncludeTargetSupportedUnsupported
AdditionalFeatureDataOfMSAuthenticatorMethodModelExcludeTargetSupportedUnsupported
EmailAuthenticationMethodConfigurationModelAllowExternalIdToUseEmailOtpSupportedUnsupported
TemporaryAccessPassAuthenticationMethodConfigurationModelDefaultLengthSupportedUnsupported
TemporaryAccessPassAuthenticationMethodConfigurationModelDefaultLifetimeInMinuteSupportedUnsupported
TemporaryAccessPassAuthenticationMethodConfigurationModelIsUsableOnceSupportedUnsupported
TemporaryAccessPassAuthenticationMethodConfigurationModelMaximumLifetimeInMinutesSupportedUnsupported
TemporaryAccessPassAuthenticationMethodConfigurationModelMinimumLifetimeInMinutesSupportedUnsupported

Object Attributes

AttributesExportRestore
StateSupportedUnsupported
IncludeTargetsSupportedUnsupported
ExcludeTargetsSupportedUnsupported

Microsoft Entra ID (Conditional Access)

Please note that the table exclusively lists high-level settings and does not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Data TypeExportRestore
TemplateIdSupportedUnsupported
ConditionsSupportedSupported
CreatedDateTimeSupportedUnsupported
DescriptionSupportedUnsupported
GrantControlsSupportedSupported
ModifiedDateTimeSupportedUnsupported
SessionControlsSupportedSupported
StateSupportedSupported

Microsoft Entra ID (Company Branding)

Please note that the table exclusively lists high-level settings and does not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Data TypeExportRestore
BackgroundColorSupportedUnsupported
BackgroundImageSupportedUnsupported
BackgroundImageRelativeUrlSupportedUnsupported
BannerLogoSupportedUnsupported
BannerLogoRelativeUrlSupportedUnsupported
CdnListSupportedUnsupported
SignInPageTextSupportedUnsupported
SquareLogoSupportedUnsupported
SquareLogoRelativeUrlSupportedUnsupported
UsernameHintTextSupportedUnsupported
BackgroundImageStrSupportedUnsupported
BannerLogoStrSupportedUnsupported
SquareLogoStrSupportedUnsupported
BackgroundImageExtensionSupportedUnsupported
BannerLogoExtensionSupportedUnsupported
SquareLogoExtensionSupportedUnsupported

Microsoft Entra ID (Group General)

Please note that the tables exclusively list high-level settings and do not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Data TypeExportRestore
TemplateIdSupportedUnsupported
ValueSupportedSupported

Object Attributes

AttributesStatusNote
Self Service Group ManagementSupportedTo protect this property, you must have a service account profile configured in AvePoint Online Services interface and the service account you use must have the Cloud Application Administrator role.
Security GroupSupported
Microsoft 365 GroupSupported

Microsoft Entra ID (Group Naming Policy)

Please note that the tables exclusively list high-level settings and do not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Data TypeExportRestore
TemplateIdSupportedUnsupported
ValueSupportedSupported

Object Attributes

AttributesExportRestore
NameSupportedSupported
ValueSupportedSupported
AdditionalDataSupportedUnsupported
ODataTypeSupportedUnsupported

Microsoft Entra ID (Group Expiration)

Please note that the tables exclusively list high-level settings and do not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Data TypeExportRestore
TemplateIdSupportedUnsupported
ValueSupportedSupported

Object Attributes

AttributesExportRestore
AlternateNotificationEmailsSupportedSupported
GroupLifetimeInDaysSupportedSupported
AdditionalDataSupportedUnsupported
ManagedGroupTypesSupportedSupported
GroupsIdSupportedSupported
GroupsNameSupportedSupported

Exchange Management

Please note that the table exclusively lists high-level settings and does not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

AttributesExportRestore
RecipientRootSupportedUnsupported
FilterSupportedUnsupported
RecipientFilterSupportedUnsupported
ServerFilterSupportedUnsupported
DatabaseFilterSupportedUnsupported
TenantOrganizationFilterSupportedUnsupported
ScopeRestrictionTypeSupportedUnsupported
ExclusiveSupportedUnsupported
QueryFilterSupportedUnsupported
AdminDisplayNameSupportedUnsupported

Microsoft 365 Defender

Refer to the lists below for the policies in Microsoft 365 Defender protected by Admin Portal Settings service.

Please note that the tables exclusively list high-level settings and do not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Anti-Phishing

Data TypeStatus
FilterRuleSupported

Object Attributes

AttributeExportRestore
TargetedUsersToProtectSupportedSupported
AdminDisplayNameSupportedSupported
AuthenticationFailActionSupportedSupported
ConditionsSupportedSupported
DmarcQuarantineActionSupportedSupported
DmarcRejectActionSupportedSupported
EnabledSupportedSupported
EnableFirstContactSafetyTipsSupportedSupported
EnableMailboxIntelligenceSupportedSupported
EnableMailboxIntelligenceProtectionSupportedSupported
EnableOrganizationDomainsProtectionSupportedSupported
EnableSimilarDomainsSafetyTipsSupportedSupported
EnableSimilarUsersSafetyTipsSupportedSupported
EnableSpoofIntelligenceSupportedSupported
EnableSuspiciousSafetyTipSupportedSupported
EnableTargetedDomainsProtectionSupportedSupported
EnableTargetedUserProtectionSupportedSupported
EnableUnauthenticatedSenderSupportedSupported
EnableUnusualCharactersSafetyTipsSupportedSupported
EnableViaTagSupportedSupported
ExceptIfRecipientDomainIsSupportedSupported
ExceptIfSentToSupportedSupported
ExceptIfSentToMemberOfSupportedSupported
ExceptionsSupportedSupported
ExcludedDomainsSupportedSupported
ExcludedSendersSupportedSupported
HonorDmarcPolicySupportedSupported
ImmutableIdSupportedUnsupported
ImpersonationProtectionStateSupportedSupported
IsDefaultSupportedUnsupported
MailboxIntelligenceProtectionActionSupportedSupported
MailboxIntelligenceProtectionActionRecipientsSupportedSupported
MailboxIntelligenceQuarantineTagSupportedSupported
PhishThresholdLevelSupportedSupported
PolicyTagSupportedSupported
RecipientDomainIsSupportedSupported
RecommendedPolicyTypeSupportedUnsupported
SentToSupportedSupported
SentToMemberOfSupportedSupported
SpoofQuarantineTagSupportedSupported
TargetedDomainActionRecipientsSupportedSupported
TargetedDomainProtectionActionSupportedSupported
TargetedDomainQuarantineTagSupportedSupported
TargetedDomainsToProtectSupportedSupported
TargetedUserActionRecipientsSupportedSupported
TargetedUserProtectionActionSupportedSupported
TargetedUserQuarantineTagSupportedSupported

Anti-Spam

Data TypeStatus
FilterRuleSupported

Object Attributes

AttributeExportRestore
EnableSafeListSupportedSupported
ActionWhenThresholdReachedSupportedSupported
AddXHeaderValueSupportedSupported
AllowedSenderDomainsSupportedSupported
AllowedSendersSupportedSupported
ApplyPhishActionToIntraOrgSupportedSupported
AutoForwardingModeSupportedSupported
BccSuspiciousOutboundAdditionalRecipientsSupportedSupported
BccSuspiciousOutboundMailSupportedSupported
BlockedSenderDomainsSupportedSupported
BlockedSendersSupportedSupported
BulkQuarantineTagSupportedSupported
BulkSpamActionSupportedSupported
ConfigurationTypeSupportedSupported
DirectoryBasedEdgeBlockModeSupportedSupported
DownloadLinkSupportedSupported
EnableEndUserSpamNotificationsSupportedSupported
EnableLanguageBlockListSupportedSupported
EnableRegionBlockListSupportedSupported
EndUserSpamNotificationCustomFromAddressSupportedSupported
EndUserSpamNotificationCustomSubjectSupportedSupported
EndUserSpamNotificationFrequencySupportedSupported
EndUserSpamNotificationLanguageSupportedSupported
EndUserSpamNotificationLimitSupportedSupported
ExceptIfFromSupportedSupported
ExceptIfFromMemberOfSupportedSupported
ExceptIfRecipientDomainIsSupportedSupported
ExceptIfSenderDomainIsSupportedSupported
ExceptIfSentToSupportedSupported
ExceptIfSentToMemberOfSupportedSupported
FalsePositiveAdditionalRecipientsSupportedSupported
FromMemberOfSupportedSupported
HighConfidencePhishActionSupportedSupported
HighConfidencePhishQuarantineTagSupportedSupported
HighConfidenceSpamActionSupportedSupported
HighConfidenceSpamQuarantineTagSupportedSupported
HostedContentFilterPolicySupportedSupported
IncreaseScoreWithBizOrInfoUrlsSupportedSupported
IncreaseScoreWithImageLinksSupportedSupported
IncreaseScoreWithNumericIpsSupportedSupported
IncreaseScoreWithRedirectToOtherPortSupportedSupported
InlineSafetyTipsEnabledSupportedSupported
IPAllowListSupportedSupported
IPBlockListSupportedSupported
IsDefaultSupportedUnsupported
MarkAsSpamBulkMailSupportedSupported
MarkAsSpamEmbedTagsInHtmlSupportedSupported
MarkAsSpamEmptyMessagesSupportedSupported
MarkAsSpamFormTagsInHtmlSupportedSupported
MarkAsSpamFramesInHtmlSupportedSupported
MarkAsSpamFromAddressAuthFailSupportedSupported
MarkAsSpamJavaScriptInHtmlSupportedSupported
MarkAsSpamNdrBackscatterSupportedSupported
MarkAsSpamObjectTagsInHtmlSupportedSupported
MarkAsSpamSensitiveWordListSupportedSupported
MarkAsSpamSpfRecordHardFailSupportedSupported
MarkAsSpamWebBugsInHtmlSupportedSupported
ModifySubjectValueSupportedSupported
NotifyOutboundSpamSupportedSupported
NotifyOutboundSpamRecipientsSupportedSupported
PhishQuarantineTagSupportedSupported
PhishSpamActionSupportedSupported
PhishZapEnabledSupportedSupported
PrioritySupportedSupported
QuarantineRetentionPeriodSupportedSupported
RecipientDomainIsSupportedSupported
RecipientLimitExternalPerHourSupportedSupported
RecipientLimitInternalPerHourSupportedSupported
RecipientLimitPerDaySupportedSupported
RecommendedPolicyTypeSupportedUnsupported
RedirectToRecipientsSupportedSupported
RegionBlockListSupportedSupported
SenderDomainIsSupportedSupported
SentToSupportedSupported
SentToMemberOfSupportedSupported
SpamActionSupportedSupported
SpamQuarantineTagSupportedSupported
SpamZapEnabledSupportedSupported
TestModeActionSupportedSupported
TestModeBccToRecipientsSupportedSupported
ZapEnabledSupportedSupported

Anti-Malware

Data TypeStatus
FilterRuleSupported

Object Attributes

AttributeExportRestore
AdminDisplayNameSupportedSupported
CustomExternalBodySupportedSupported
CustomExternalSubjectSupportedSupported
CustomInternalBodySupportedSupported
CustomInternalSubjectSupportedSupported
CustomFromAddressSupportedSupported
CustomFromNameSupportedSupported
CustomNotificationsSupportedSupported
EnableExternalSenderAdminNotificationsSupportedSupported
EnableFileFilterSupportedSupported
EnableInternalSenderAdminNotificationsSupportedSupported
ExternalSenderAdminAddressSupportedSupported
FileTypeActionSupportedSupported
FileTypesSupportedSupported
InternalSenderAdminAddressSupportedSupported
IsDefaultSupportedUnsupported
QuarantineTagSupportedSupported
RecommendedPolicyTypeSupportedUnsupported
ZapEnabledSupportedSupported
MalwareFilterPolicySupportedSupported
StateSupportedUnsupported
PrioritySupportedSupported
CommentsSupportedUnsupported
DescriptionSupportedSupported
RuleVersionSupportedUnsupported
SentToSupportedSupported
SentToMemberOfSupportedSupported
RecipientDomainIsSupportedSupported
ExceptIfSentToSupportedSupported
ExceptIfSentToMemberOfSupportedSupported
ExceptIfRecipientDomainIsSupportedSupported
ConditionsSupportedUnsupported
ExceptionsSupportedUnsupported
ImmutableIdSupportedUnsupported
Data TypeStatus
FilterRuleSupported

Object Attributes

AttributeExportRestore
AdminDisplayNameSupportedSupported
AllowClickThroughSupportedSupported
CommentsSupportedSupported
ConditionsSupportedUnsupported
CustomNotificationTextSupportedSupported
DeliverMessageAfterScanSupportedSupported
DescriptionSupportedSupported
DisableUrlRewriteSupportedSupported
DoNotRewriteUrlsSupportedSupported
EnableOrganizationBrandingSupportedSupported
EnableSafeLinksForEmailSupportedSupported
EnableSafeLinksForOfficeSupportedSupported
EnableSafeLinksForTeamsSupportedSupported
ExceptIfRecipientDomainIsSupportedSupported
ExceptIfSentToSupportedSupported
ExceptIfSentToMemberOfSupportedSupported
ExceptionsSupportedUnsupported
ImmutableIdSupportedUnsupported
IsBuiltInProtectionSupportedUnsupported
LocalizedNotificationTextListSupportedSupported
PrioritySupportedSupported
RecipientDomainIsSupportedSupported
RecommendedPolicyTypeSupportedUnsupported
RuleVersionSupportedUnsupported
ScanUrlsSupportedSupported
SentToSupportedSupported
SentToMemberOfSupportedSupported
TrackClicksSupportedSupported
UseTranslatedNotificationTextSupportedSupported

Safe Attachments

Data TypeStatus
FilterRuleSupported

Object Attributes

AttributeExportRestore
ActionSupportedSupported
ActionOnErrorSupportedSupported
AdminDisplayNameSupportedSupported
CommentsSupportedUnsupported
ConditionsSupportedUnsupported
ConfidenceLevelThresholdSupportedSupported
DescriptionSupportedSupported
EnableSupportedSupported
EnableFileFilterSupportedSupported
EnableOrganizationBrandingSupportedSupported
ExceptIfRecipientDomainIsSupportedSupported
ExceptIfSentToSupportedSupported
ExceptIfSentToMemberOfSupportedSupported
ExceptionsSupportedUnsupported
ImmutableIdSupportedUnsupported
IsBuiltInProtectionSupportedUnsupported
IsDefaultSupportedUnsupported
OperationModeSupportedSupported
PrioritySupportedSupported
QuarantineTagSupportedSupported
RecipientDomainIsSupportedSupported
RecommendedPolicyTypeSupportedUnsupported
RedirectSupportedSupported
RedirectAddressSupportedSupported
RuleVersionSupportedUnsupported
ScanTimeoutSupportedSupported
SentToSupportedSupported
SentToMemberOfSupportedSupported
StateSupportedSupported

Intune

Refer to the lists below for the settings in Microsoft Intune admin center protected by Admin Portal Settings.

Please note that the lists exclusively list high-level settings and do not encompass specific object details. For comprehensive information or additional support, kindly contact our Support team.

Apps (Protection Policies)

Object NameObject TypeExportRestore
AndroidManagedAppProtectionModelCustomBrowserDisplayNameSupportedSupported
AndroidManagedAppProtectionModelCustomBrowserPackageIdSupportedSupported
AndroidManagedAppProtectionModelDeployedAppCountSupportedUnsupported
AndroidManagedAppProtectionModelDisableAppEncryptionIfDeviceEncryptionIsEnabledSupportedSupported
AndroidManagedAppProtectionModelEncryptAppDataSupportedSupported
AndroidManagedAppProtectionModelMinimumRequiredPatchVersionSupportedSupported
AndroidManagedAppProtectionModelMinimumWarningPatchVersionSupportedSupported
AndroidManagedAppProtectionModelScreenCaptureBlockedSupportedSupported
AndroidManagedAppProtectionModelAppsSupportedSupported
AndroidManagedAppProtectionModelAppsNextLinkSupportedUnsupported
AndroidManagedAppProtectionModelDeploymentSummarySupportedUnsupported
IosManagedAppProtectionModelAppDataEncryptionTypeSupportedSupported
IosManagedAppProtectionModelCustomBrowserProtocolSupportedSupported
IosManagedAppProtectionModelDeployedAppCountSupportedUnsupported
IosManagedAppProtectionModelFaceIdBlockedSupportedSupported
IosManagedAppProtectionModelMinimumRequiredSdkVersionSupportedSupported
IosManagedAppProtectionModelAppsSupportedSupported
IosManagedAppProtectionModelAppsNextLinkSupportedUnsupported
IosManagedAppProtectionModelDeploymentSummarySupportedUnsupported
WindowsInformationProtectionModelAzureRightsManagementServicesAllowedSupportedSupported
WindowsInformationProtectionModelDataRecoveryCertificateSupportedSupported
WindowsInformationProtectionModelEnforcementLevelSupportedSupported
WindowsInformationProtectionModelEnterpriseDomainSupportedSupported
WindowsInformationProtectionModelEnterpriseInternalProxyServersSupportedSupported
WindowsInformationProtectionModelEnterpriseIPRangesSupportedSupported
WindowsInformationProtectionModelEnterpriseIPRangesAreAuthoritativeSupportedSupported
WindowsInformationProtectionModelEnterpriseNetworkDomainNamesSupportedSupported
WindowsInformationProtectionModelEnterpriseProtectedDomainNamesSupportedSupported
WindowsInformationProtectionModelEnterpriseProxiedDomainsSupportedSupported
WindowsInformationProtectionModelEnterpriseProxyServersSupportedSupported
WindowsInformationProtectionModelEnterpriseProxyServersAreAuthoritativeSupportedSupported
WindowsInformationProtectionModelExemptAppsSupportedSupported
WindowsInformationProtectionModelIconsVisibleSupportedSupported
WindowsInformationProtectionModelIndexingEncryptedStoresOrItemsBlockedSupportedSupported
WindowsInformationProtectionModelIsAssignedSupportedSupported
WindowsInformationProtectionModelNeutralDomainResourcesSupportedSupported
WindowsInformationProtectionModelProtectedAppsSupportedSupported
WindowsInformationProtectionModelProtectionUnderLockConfigRequiredSupportedSupported
WindowsInformationProtectionModelRevokeOnUnenrollDisabledSupportedSupported
WindowsInformationProtectionModelRightsManagementServicesTemplateIdSupportedSupported
WindowsInformationProtectionModelSmbAutoEncryptedFileExtensionsSupportedSupported
WindowsInformationProtectionModelAssignmentsSupportedSupported
WindowsInformationProtectionModelExemptAppLockerFilesSupportedUnsupported
WindowsInformationProtectionModelProtectedAppLockerFilesSupportedUnsupported
WindowsInformationProtectionModelProtectedAppLockerFilesNextLinkSupportedUnsupported
ManagedAppProtectionModelIsAssignedSupportedSupported
ManagedAppProtectionModelAssignmentsSupportedSupported
ManagedAppProtectionModelAssignmentsNextLinkSupportedUnsupported

Apps (Configuration Policies)

Object NameObject TypeExportRestore
Managed AppappGroupTypeSupportedSupported
Managed AppappsSupportedSupported
Managed AppassignmentsSupportedSupported
Managed AppcustomSettingsSupportedSupported
Managed AppdeployedAppCountSupportedUnsupported
Managed AppdescriptionSupportedSupported
Managed AppdisplayNameSupportedSupported
Managed AppisAssignedSupportedSupported
Managed ApproleScopeTagIdsSupportedSupported
Managed AppsettingsSupportedSupported
Managed ApptargetedAppManagementLevelsSupportedSupported
Managed Device (IOS)targetedMobileAppsSupportedSupported
Managed Device (IOS)roleScopeTagIdsSupportedSupported
Managed Device (IOS)descriptionSupportedSupported
Managed Device (IOS)displayNameSupportedSupported
Managed Device (IOS)encodedSettingXmlSupportedSupported
Managed Device (IOS)settingsSupportedSupported

Devices (Compliance Policies)

Object NameObject TypeExportRestore
DeviceCompliancePolicyModelUserStatusesSupportedUnsupported
DeviceCompliancePolicyModelScheduledActionsForRuleSupportedSupported
DeviceCompliancePolicyModelDeviceStatusOverviewSupportedUnsupported
DeviceCompliancePolicyModelDeviceStatusesSupportedUnsupported
DeviceCompliancePolicyModelDeviceSettingStateSummariesSupportedUnsupported
DeviceCompliancePolicyModelAssignmentsSupportedSupported
DeviceCompliancePolicyModelVersionSupportedUnsupported
DeviceCompliancePolicyModelLastModifiedDateTimeSupportedUnsupported
DeviceCompliancePolicyModelDescriptionSupportedSupported
DeviceCompliancePolicyModelCreatedDateTimeSupportedUnsupported
DeviceCompliancePolicyModelUserStatusOverviewSupportedUnsupported
AndroidCompliancePolicyModelSecurityRequireUpToDateSecurityProvidersSupportedSupported
AndroidCompliancePolicyModelSecurityRequireSafetyNetAttestationCertifiedDeviceSupportedSupported
AndroidCompliancePolicyModelSecurityRequireSafetyNetAttestationBasicIntegritySupportedSupported
AndroidCompliancePolicyModelSecurityRequireGooglePlayServicesSupportedSupported
AndroidCompliancePolicyModelSecurityRequireCompanyPortalAppIntegritySupportedSupported
AndroidCompliancePolicyModelSecurityPreventInstallAppsFromUnknownSourcesSupportedSupported
AndroidCompliancePolicyModelSecurityDisableUsbDebuggingSupportedSupported
AndroidCompliancePolicyModelSecurityBlockJailbrokenDevicesSupportedSupported
AndroidCompliancePolicyModelPasswordRequiredTypeSupportedSupported
AndroidCompliancePolicyModelPasswordRequiredSupportedSupported
AndroidCompliancePolicyModelPasswordPreviousPasswordBlockCountSupportedSupported
AndroidCompliancePolicyModelPasswordMinutesOfInactivityBeforeLockSupportedSupported
AndroidCompliancePolicyModelPasswordMinimumLengthSupportedSupported
AndroidCompliancePolicyModelPasswordExpirationDaysSupportedSupported
AndroidCompliancePolicyModelOsMinimumVersionSupportedSupported
AndroidCompliancePolicyModelOsMaximumVersionSupportedSupported
AndroidCompliancePolicyModelDeviceThreatProtectionRequiredSecurityLevelSupportedSupported
AndroidCompliancePolicyModelDeviceThreatProtectionEnabledSupportedSupported
AndroidCompliancePolicyModelSecurityRequireVerifyAppsSupportedSupported
AndroidCompliancePolicyModelStorageRequireEncryptionSupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityRequireUpToDateSecurityProvidersSupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityRequireSafetyNetAttestationCertifiedDeviceSupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityRequireSafetyNetAttestationBasicIntegritySupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityRequireGooglePlayServicesSupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityRequireCompanyPortalAppIntegritySupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityPreventInstallAppsFromUnknownSourcesSupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityDisableUsbDebuggingSupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityBlockJailbrokenDevicesSupportedSupported
AndroidWorkProfileCompliancePolicyModelPasswordRequiredTypeSupportedSupported
AndroidWorkProfileCompliancePolicyModelPasswordRequiredSupportedSupported
AndroidWorkProfileCompliancePolicyModelPasswordPreviousPasswordBlockCountSupportedSupported
AndroidWorkProfileCompliancePolicyModelPasswordMinutesOfInactivityBeforeLockSupportedSupported
AndroidWorkProfileCompliancePolicyModelPasswordMinimumLengthSupportedSupported
AndroidWorkProfileCompliancePolicyModelPasswordExpirationDaysSupportedSupported
AndroidWorkProfileCompliancePolicyModelOsMinimumVersionSupportedSupported
AndroidWorkProfileCompliancePolicyModelOsMaximumVersionSupportedSupported
AndroidWorkProfileCompliancePolicyModelMinAndroidSecurityPatchLevelSupportedSupported
AndroidWorkProfileCompliancePolicyModelDeviceThreatProtectionRequiredSecurityLevelSupportedSupported
AndroidWorkProfileCompliancePolicyModelDeviceThreatProtectionEnabledSupportedSupported
AndroidWorkProfileCompliancePolicyModelSecurityRequireVerifyAppsSupportedSupported
AndroidWorkProfileCompliancePolicyModelStorageRequireEncryptionSupportedSupported
IosCompliancePolicyModeDeviceThreatProtectionEnabledSupportedSupported
IosCompliancePolicyModeDeviceThreatProtectionRequiredSecurityLevelSupportedSupported
IosCompliancePolicyModeManagedEmailProfileRequiredSupportedSupported
IosCompliancePolicyModeOsMaximumVersionSupportedSupported
IosCompliancePolicyModeOsMinimumVersionSupportedSupported
IosCompliancePolicyModePasscodeBlockSimpleSupportedSupported
IosCompliancePolicyModePasscodeExpirationDaySupportedSupported
IosCompliancePolicyModePasscodeMinimumCharacterSetCountSupportedSupported
IosCompliancePolicyModePasscodeMinimumLengthSupportedSupported
IosCompliancePolicyModePasscodeMinutesOfInactivityBeforeLockSupportedSupported
IosCompliancePolicyModePasscodePreviousPasscodeBlockCountSupportedSupported
IosCompliancePolicyModePasscodeRequiredSupportedSupported
IosCompliancePolicyModePasscodeRequiredTypeSupportedSupported
MacOSCompliancePolicyModelPasswordRequiredTypeSupportedSupported
MacOSCompliancePolicyModelPasswordRequiredSupportedSupported
MacOSCompliancePolicyModelPasswordPreviousPasswordBlockCountSupportedSupported
MacOSCompliancePolicyModelPasswordMinutesOfInactivityBeforeLockSupportedSupported
MacOSCompliancePolicyModelPasswordMinimumLengthSupportedSupported
MacOSCompliancePolicyModelPasswordMinimumCharacterSetCountSupportedSupported
MacOSCompliancePolicyModelPasswordExpirationDaysSupportedSupported
MacOSCompliancePolicyModelPasswordBlockSimpleSupportedSupported
MacOSCompliancePolicyModelOsMinimumVersionSupportedSupported
MacOSCompliancePolicyModelOsMaximumVersionSupportedSupported
MacOSCompliancePolicyModelFirewallEnableStealthModeSupportedSupported
MacOSCompliancePolicyModelFirewallEnabledSupportedSupported
MacOSCompliancePolicyModelFirewallBlockAllIncomingSupportedSupported
MacOSCompliancePolicyModelDeviceThreatProtectionRequiredSecurityLevelSupportedSupported
MacOSCompliancePolicyModelDeviceThreatProtectionEnabledSupportedSupported
MacOSCompliancePolicyModelStorageRequireEncryptionSupportedSupported
MacOSCompliancePolicyModelSystemIntegrityProtectionEnabledSupportedSupported
Windows10CompliancePolicyModelRequireHealthyDeviceReportSupportedSupported
Windows10CompliancePolicyModelPasswordRequiredTypeSupportedSupported
Windows10CompliancePolicyModelPasswordRequiredToUnlockFromIdleSupportedSupported
Windows10CompliancePolicyModelPasswordRequiredSupportedSupported
Windows10CompliancePolicyModelPasswordPreviousPasswordBlockCountSupportedSupported
Windows10CompliancePolicyModelPasswordMinutesOfInactivityBeforeLockSupportedSupported
Windows10CompliancePolicyModelPasswordMinimumLengthSupportedSupported
Windows10CompliancePolicyModelPasswordMinimumCharacterSetCountSupportedSupported
Windows10CompliancePolicyModelPasswordExpirationDaysSupportedSupported
Windows10CompliancePolicyModelPasswordBlockSimpleSupportedSupported
Windows10CompliancePolicyModelOsMinimumVersionSupportedSupported
Windows10CompliancePolicyModelOsMaximumVersionSupportedSupported
Windows10CompliancePolicyModelMobileOsMinimumVersionSupportedSupported
Windows10CompliancePolicyModelMobileOsMaximumVersionSupportedSupported
Windows10CompliancePolicyModelEarlyLaunchAntiMalwareDriverEnabledSupportedSupported
Windows10CompliancePolicyModelCodeIntegrityEnabledSupportedSupported
Windows10CompliancePolicyModelBitLockerEnabledSupportedSupported
Windows10CompliancePolicyModelSecureBootEnabledSupportedSupported
Windows10CompliancePolicyModelStorageRequireEncryptionSupportedSupported
Windows81CompliancePolicyModelOsMaximumVersionSupportedSupported
Windows81CompliancePolicyModelOsMinimumVersionSupportedSupported
Windows81CompliancePolicyModelPasswordBlockSimpleSupportedSupported
Windows81CompliancePolicyModelPasswordExpirationDaySupportedSupported
Windows81CompliancePolicyModelPasswordMinimumCharacterSetCountSupportedSupported
Windows81CompliancePolicyModelPasswordMinimumLengthSupportedSupported
Windows81CompliancePolicyModelPasswordMinutesOfInactivityBeforeLockSupportedSupported
Windows81CompliancePolicyModelPasswordPreviousPasswordBlockCountSupportedSupported
Windows81CompliancePolicyModelPasswordRequiredSupportedSupported
Windows81CompliancePolicyModelPasswordRequiredTypeSupportedSupported
Windows81CompliancePolicyModelStorageRequireEncryptionSupportedSupported

Devices (Conditional Access)

ObjectNameObjectTypeExportRestore
ConditionalAccessPolicyModelTemplateIdSupportedUnsupported
ConditionalAccessPolicyModelConditionsSupportedSupported
ConditionalAccessPolicyModelDescriptionSupportedUnsupported
ConditionalAccessPolicyModelGrantControlsSupportedSupported
ConditionalAccessPolicyModelSessionControlsSupportedSupported
ConditionalAccessPolicyModelStateSupportedSupported

Devices (Configuration Profiles)

Object NameObject TypeExportRestore
AndroidCustomConfigurationModelOmaSettingsSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordBlockTrustAgentsSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordExpirationDaysSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordMinimumLengthSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordMinutesOfInactivityBeforeScreenTimeoutSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordPreviousPasswordBlockCountSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordRequiredSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordRequiredTypeSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordSignInFailureCountBeforeFactoryResetSupportedSupported
AndroidGeneralDeviceConfigurationModelPowerOffBlockedSupportedSupported
AndroidGeneralDeviceConfigurationModelScreenCaptureBlockedSupportedSupported
AndroidGeneralDeviceConfigurationModelSecurityRequireVerifyAppsSupportedSupported
AndroidGeneralDeviceConfigurationModelStorageBlockGoogleBackupSupportedSupported
AndroidGeneralDeviceConfigurationModelStorageBlockRemovableStorageSupportedSupported
AndroidGeneralDeviceConfigurationModelStorageRequireDeviceEncryptionSupportedSupported
AndroidGeneralDeviceConfigurationModelStorageRequireRemovableStorageEncryptionSupportedSupported
AndroidGeneralDeviceConfigurationModelVoiceAssistantBlockedSupportedSupported
AndroidGeneralDeviceConfigurationModelVoiceDialingBlockedSupportedSupported
AndroidGeneralDeviceConfigurationModelWebBrowserBlockAutofillSupportedSupported
AndroidGeneralDeviceConfigurationModelWebBrowserBlockedSupportedSupported
AndroidGeneralDeviceConfigurationModelWebBrowserBlockJavaScriptSupportedSupported
AndroidGeneralDeviceConfigurationModelWebBrowserBlockPopupsSupportedSupported
AndroidGeneralDeviceConfigurationModelPasswordBlockFingerprintUnlockSupportedSupported
AndroidGeneralDeviceConfigurationModelWebBrowserCookieSettingsSupportedSupported
AndroidGeneralDeviceConfigurationModelNfcBlockedSupportedSupported
AndroidGeneralDeviceConfigurationModelKioskModeBlockVolumeButtonsSupportedSupported
AndroidGeneralDeviceConfigurationModelAppsBlockClipboardSharingSupportedSupported
AndroidGeneralDeviceConfigurationModelAppsBlockCopyPasteSupportedSupported
AndroidGeneralDeviceConfigurationModelAppsBlockYouTubeSupportedSupported
AndroidGeneralDeviceConfigurationModelAppsHideListSupportedSupported
AndroidGeneralDeviceConfigurationModelAppsInstallAllowListSupportedSupported
AndroidGeneralDeviceConfigurationModelAppsLaunchBlockListSupportedSupported
AndroidGeneralDeviceConfigurationModelBluetoothBlockedSupportedSupported
AndroidGeneralDeviceConfigurationModelCameraBlockedSupportedSupported
AndroidGeneralDeviceConfigurationModelCellularBlockDataRoamingSupportedSupported
AndroidGeneralDeviceConfigurationModelCellularBlockMessagingSupportedSupported
AndroidWorkProfileCustomConfigurationModelOmaSettingsSupportedSupported
Windows81GeneralConfigurationModelUpdatesRequireAutomaticUpdatesSupportedSupported
Windows81GeneralConfigurationModelStorageRequireDeviceEncryptionSupportedSupported
Windows81GeneralConfigurationModelPasswordSignInFailureCountBeforeFactoryResetSupportedSupported
Windows81GeneralConfigurationModelPasswordRequiredTypeSupportedSupported
Windows81GeneralConfigurationModelPasswordPreviousPasswordBlockCountSupportedSupported
Windows81GeneralConfigurationModelPasswordMinutesOfInactivityBeforeScreenTimeoutSupportedSupported
Windows81GeneralConfigurationModelPasswordMinimumLengthSupportedSupported
Windows81GeneralConfigurationModelPasswordMinimumCharacterSetCountSupportedSupported
Windows81GeneralConfigurationModelPasswordExpirationDaysSupportedSupported
Windows81GeneralConfigurationModelPasswordBlockPicturePasswordAndPinSupportedSupported
Windows81GeneralConfigurationModelDiagnosticsBlockDataSubmissionSupportedSupported
Windows81GeneralConfigurationModelCellularBlockDataRoamingSupportedSupported
Windows81GeneralConfigurationModelBrowserTrustedSitesSecurityLevelSupportedSupported
Windows81GeneralConfigurationModelBrowserRequireSmartScreenSupportedSupported
Windows81GeneralConfigurationModelBrowserRequireHighSecurityForRestrictedSitesSupportedSupported
Windows81GeneralConfigurationModelBrowserRequireFraudWarningSupportedSupported
Windows81GeneralConfigurationModelBrowserRequireFirewallSupportedSupported
Windows81GeneralConfigurationModelAccountsBlockAddingNonMicrosoftAccountEmailSupportedSupported
Windows81GeneralConfigurationModelApplyOnlyToWindows81SupportedUnsupported
Windows81GeneralConfigurationModelBrowserBlockAutofillSupportedSupported
Windows81GeneralConfigurationModelBrowserBlockAutomaticDetectionOfIntranetSitesSupportedSupported
Windows81GeneralConfigurationModelBrowserBlockEnterpriseModeAccessSupportedSupported
Windows81GeneralConfigurationModelBrowserBlockJavaScriptSupportedSupported
Windows81GeneralConfigurationModelUserAccountControlSettingsSupportedSupported
Windows81GeneralConfigurationModelBrowserBlockPluginsSupportedSupported
Windows81GeneralConfigurationModelBrowserBlockSendingDoNotTrackHeaderSupportedSupported
Windows81GeneralConfigurationModelBrowserBlockSingleWordEntryOnIntranetSitesSupportedSupported
Windows81GeneralConfigurationModelBrowserEnterpriseModeSiteListLocationSupportedSupported
Windows81GeneralConfigurationModelBrowserInternetSecurityLevelSupportedSupported
Windows81GeneralConfigurationModelBrowserBlockPopupsSupportedSupported
Windows81GeneralConfigurationModelBrowserLoggingReportLocationSupportedSupported
Windows81GeneralConfigurationModelWorkFoldersUrlSupportedSupported
DeviceConfigurationModelCreatedDateTimeSupportedUnsupported
DeviceConfigurationModelDescriptionSupportedSupported
DeviceConfigurationModelLastModifiedDateTimeSupportedUnsupported
DeviceConfigurationModelVersionSupportedUnsupported
DeviceConfigurationModelAssignmentsSupportedSupported
DeviceConfigurationModelAssignmentsNextLinkSupportedSupported
DeviceConfigurationModelDeviceSettingStateSummariesSupportedSupported
DeviceConfigurationModelDeviceSettingStateSummariesNextLinkSupportedSupported
DeviceConfigurationModelDeviceStatusesSupportedSupported
DeviceConfigurationModelDeviceStatusesNextLinkSupportedSupported
DeviceConfigurationModelDeviceStatusOverviewSupportedSupported
DeviceConfigurationModelUserStatusesSupportedSupported
DeviceConfigurationModelUserStatusesNextLinkSupportedSupported
DeviceConfigurationModelUserStatusOverviewSupportedSupported

Devices (Scripts and remediations)

Object NameObject TypeExportRestore
DeviceScriptWindowsRecordModelEnforceSignatureCheckSupportedSupported
DeviceScriptWindowsRecordModelRunAs32BitSupportedSupported
DeviceScriptWindowsRecordModelDescriptionSupportedSupported
DeviceScriptWindowsRecordModelScriptContentSupportedSupported
DeviceScriptWindowsRecordModelCreatedDateTimeSupportedUnsupported
DeviceScriptWindowsRecordModelLastModifiedDateTimeSupportedUnsupported
DeviceScriptWindowsRecordModelRunAsAccountSupportedSupported
DeviceScriptWindowsRecordModelFileNameSupportedSupported
DeviceScriptWindowsRecordModelRoleScopeTagIdsSupportedSupported
DeviceScriptWindowsRecordModelAssignmentsSupportedSupported
DeviceScriptWindowsRecordModelRunStateSupportedSupported
DeviceScriptWindowsRecordModelResultMessageSupportedSupported
DeviceScriptWindowsRecordModelLastStateUpdateDateTimeSupportedUnsupported
DeviceScriptWindowsRecordModelErrorCodeSupportedSupported
DeviceScriptWindowsRecordModelErrorDescriptionSupportedSupported
DeviceScriptWindowsRecordModelSuccessDeviceCountSupportedSupported
DeviceScriptWindowsRecordModelErrorDeviceCountSupportedSupported
DeviceScriptWindowsRecordModelUserPrincipalNameSupportedSupported
DeviceScriptMacOsRecordModelEnforceSignatureCheckSupportedSupported
DeviceScriptMacOsRecordModelRunAs32BitSupportedSupported
DeviceScriptMacOsRecordModelDescriptionSupportedSupported
DeviceScriptMacOsRecordModelScriptContentSupportedSupported
DeviceScriptMacOsRecordModelCreatedDateTimeSupportedUnsupported
DeviceScriptMacOsRecordModelLastModifiedDateTimeSupportedUnsupported
DeviceScriptMacOsRecordModelRunAsAccountSupportedSupported
DeviceScriptMacOsRecordModelFileNameSupportedSupported
DeviceScriptMacOsRecordModelRoleScopeTagIdsSupportedSupported
DeviceScriptMacOsRecordModelAssignmentsSupportedSupported
DeviceScriptMacOsRecordModelRunStateSupportedSupported
DeviceScriptMacOsRecordModelResultMessageSupportedSupported
DeviceScriptMacOsRecordModelLastStateUpdateDateTimeSupportedUnsupported
DeviceScriptMacOsRecordModelErrorCodeSupportedSupported
DeviceScriptMacOsRecordModelErrorDescriptionSupportedSupported
DeviceScriptMacOsRecordModelSuccessDeviceCountSupportedSupported
DeviceScriptMacOsRecordModelErrorDeviceCountSupportedSupported
DeviceScriptMacOsRecordModelUserPrincipalNameSupportedSupported
ConfigurationPolicyModelRecordEnforceSignatureCheckSupportedSupported
ConfigurationPolicyModelRecordRunAs32BitSupportedSupported
ConfigurationPolicyModelRecordDescriptionSupportedSupported
ConfigurationPolicyModelRecordScriptContentSupportedSupported
ConfigurationPolicyModelRecordCreatedDateTimeSupportedUnsupported
ConfigurationPolicyModelRecordLastModifiedDateTimeSupportedUnsupported
ConfigurationPolicyModelRecordRunAsAccountSupportedSupported
ConfigurationPolicyModelRecordFileNameSupportedSupported
ConfigurationPolicyModelRecordRoleScopeTagIdsSupportedSupported
ConfigurationPolicyModelRecordAssignmentsSupportedSupported
ConfigurationPolicyModelRecordRunStateSupportedSupported
ConfigurationPolicyModelRecordResultMessageSupportedSupported
ConfigurationPolicyModelRecordLastStateUpdateDateTimeSupportedUnsupported
ConfigurationPolicyModelRecordErrorCodeSupportedSupported
ConfigurationPolicyModelRecordErrorDescriptionSupportedSupported
ConfigurationPolicyModelRecordSuccessDeviceCountSupportedSupported
ConfigurationPolicyModelRecordErrorDeviceCountSupportedSupported
ConfigurationPolicyModelRecordUserPrincipalNameSupportedSupported

Endpoint Security (Security baseline)

Object TypeExportRestore
IsAssignedSupportedSupported
TemplateIdSupportedUnsupported
DescriptionSupportedSupported
LastModifiedDateTimeSupportedUnsupported
RoleScopeTagIdsSupportedSupported
AssignmentsSupportedSupported
IsBuiltInSupportedUnsupported
SettingSupportedSupported
ConflictCountSupportedSupported
ErrorCountSupportedSupported
FailedCountSupportedSupported
NotApplicableCountSupportedSupported
NotApplicablePlatformCountSupportedSupported
SuccessCountSupportedSupported

Endpoint Security (Endpoint detection and response)

Object NameObject TypeExportRestore
EndpointSecurityBaselineIsAssignedSupportedSupported
EndpointSecurityBaselineTemplateIdSupportedUnsupported
EndpointSecurityBaselineDescriptionSupportedSupported
EndpointSecurityBaselineLastModifiedDateTimeSupportedUnsupported
EndpointSecurityBaselineRoleScopeTagIdsSupportedSupported
EndpointSecurityBaselineAssignmentsSupportedSupported
DeviceConfigurationProfileConfigurationPolicyDescriptionSupportedSupported
DeviceConfigurationProfileConfigurationPolicyCreationSourceSupportedSupported
DeviceConfigurationProfileConfigurationPolicyCreatedDateTimeSupportedUnsupported
DeviceConfigurationProfileConfigurationPolicyLastModifiedDateTimeSupportedUnsupported
DeviceConfigurationProfileConfigurationPolicyPlatformsSupportedUnsupported
DeviceConfigurationProfileConfigurationPolicyPriorityMetaDataSupportedSupported
DeviceConfigurationProfileConfigurationPolicyRoleScopeTagIdsSupportedSupported
DeviceConfigurationProfileConfigurationPolicyNameSupportedSupported
DeviceConfigurationProfileConfigurationPolicySettingCountSupportedSupported
DeviceConfigurationProfileConfigurationPolicyTechnologiesSupportedSupported
DeviceConfigurationProfileConfigurationPolicyTemplateReferenceSupportedSupported
DeviceConfigurationProfileConfigurationPolicyAssignmentsSupportedSupported
DeviceConfigurationProfileConfigurationPolicySettingsSupportedSupported