Create Entra Backup

Dropsuite Entra backup involves three main steps. The diagram below outlines the full process and locations for each step.

Add M365 tenant

Adding an M365 tenant is the first step before backing up Entra ID. Follow these steps for more details.

Entra Authorization

1. Log in to the Partner Portal.

2. Navigate to the Organization page, and then select Access Entra Portal.

3. On the dashboard, you’ll see a list of M365 tenants you’ve added. Select the tenant you want to back up, and then select Activate Backup.

4. On the New Tenants page, select Sign in with Microsoft to authorize.

5. You’ll be redirected to the Microsoft login page. Use the admin email address to sign in.

6. Enable Immediate Backup if you want the system to start backup right after authorization.

7. Set the Backup Frequency (currently only available every 24 hours).

8. Choose Continue to complete authorization.

9. Once complete, the system will display Backup Now, Download, and Show Detail options for that tenant.

    

Initiate Entra ID backup

1. Log in to the Partner Portal.

2. Navigate to the Organization page, and then select Access Entra Portal.

3. On the dashboard, hover over the tenant and select Backup Now.

4. Once initiated, a success banner will appear.

5. Visit the System Status page to monitor backup progress.

Download and Export Data

The Download button generates a download containing a .zip file with the selected data in JSON format. You can download specific objects, all objects of a certain type (such as user or group), or all currently backed-up objects.

The JSON format allows you to review data in a text editor, JSON tool, or programmatically (for example, in PowerShell or Graph API). In the event of a failed restore, JSON data can be used to perform a manual restore outside of Dropsuite Entra Backup.

Download Options:

• Tenant Level: On the Dashboard, choose Download
  
  
  
• Object Type Level: Select the tenant on the Dashboard, select the object type, and then choose Download in the sidebar.
  
  
  
• Object Detail Level: Select the tenant, select the object type and specific object, and choose Download in the sidebar.
  

After initiating a download, monitor progress on the System Status page. The download link expires in seven days.

Restore Data

Unlike downloads, restores are available only at the Object Detail Level.  After you choose Restore, the system will display a confirmation message.  To proceed, choose Restore

FAQs

What Entra object types are currently supported?

• Users
• Groups
• Roles and Admins
• App permissions

How long does the initial Entra backup take?

The duration varies based on data volume and network speed.

How often does Entra Backup run?

Backups run based on the frequency set during authorization (currently every 24 hours).

Can I perform an immediate backup?

Yes, but only during the Entra authorization process. Immediate backups are not permitted afterward.

Why doesn’t the number of snapshots match the number of backups?

Graph API only creates snapshots for objects that have changed since the last snapshot date. If no changes are reported, no new snapshot is created, even if a backup is completed successfully. As a result, successful backups may exceed the number of snapshots.

Does the restore always return success?

Sometimes, certain items may be skipped during restoration. The Download Skipped Items feature allows you to review skipped items. Go to the System Status page, select the Restore tab, and then choose Download.

Why can't I click the Restore button?

You might  see the following message: "This restore operation requires additional privileges to be assigned to the Entra Backup Application in the target tenant."

This means that the restore process requires delegated permissions, which are missing.  The app must be installed with maximum privileges to allow restore operations.  Follow the prompt, and then choose Proceed to continue.  Input the required credentials to grant the required permissions

What happens if I don't complete the maximum privilege level installation?

Without granting maximum privileges, restore functionality will not work, and you won't be able to recover data.

The app must be installed with maximum privileges to allow restore operations.  Follow the prompt and then choose Proceed to continue.  Input the required credentials to grant the necessary permissions.

What does the Reauthorization Required badge on the dashboard mean?

This indicates the implementation of additional App Registrations backup improvement. Follow these steps to get the new backup version.

1. Hover over the tenant, and then choose Show Detail.
   
   
   
2. Next, choose Update Now.
   
   
   
3. The system redirects you to the Activate Entra Backup page. Under Step 1a, choose Sign in with Microsoft.
   
   
   
4. Input the correct credential.
5. Once successful, you will find a new App Registrations folder listed under the object.