What is backed up
Conditional Access policies, named locations, SharePoint and OneDrive sharing, user and guest permissions, authentication methods, security defaults and Intune compliance policies.
Settings backup
Back up Conditional Access in every tenant, with a way back.
A daily copy of the settings that are hardest to rebuild. See exactly what changed and when, and put a policy back through an approved change.
Daily backups and restores on Growth and Scale.
What you get
Every change, field by field
An account excluded from MFA, a policy switched to report-only, sharing opened to anyone: shown with the old and new value and the date.
Deleted policies come back
A deleted Conditional Access policy is created again from its last version.
Restores you can undo
A restore is a dry run, a second approver and a recorded way back, like every other change.
How it works
- 01
Connect
The backup uses the read permissions the assessment already has.
- 02
Backed up automatically
After every assessment, and every day on Growth and Scale. Only changes are stored, 30 versions per setting.
- 03
Restore when needed
Pick the version, check the dry run, approve.
What it can’t see
Said plainly, so you know what you are buying.
- Restore covers Conditional Access, named locations and SharePoint sharing. The other settings are kept to compare and set back by hand.
- Groups, users and apps a policy refers to must still exist for Microsoft to accept a restore.
- Restores need write permission for Conditional Access or SharePoint, granted separately, and the Growth or Scale plan.
Permissions it uses
Microsoft Graph permissions, granted by the client’s admin.
Policy.Read.AllSharePointTenantSettings.Read.AllDeviceManagementConfiguration.Read.AllPolicy.ReadWrite.ConditionalAccess (restore)
Questions
- Is this a full tenant backup?
- No. It covers security and sharing settings, not mailboxes, files or Teams content. Use a data backup product for those.
- How much history is kept?
- The last 30 versions of each setting. A version is stored only when something changed.
See it on your own tenant.
Fourteen days, one tenant, no card. The figures come from your tenant, not from averages.