Microsoft Entra ID · Remaining Built-in Roles
Entra Backup Administrator
Manages all aspects of Microsoft Entra Backup including creating recovery jobs and managing backup snapshots for directory data.
Scope: Full administration of Microsoft Entra Backup for directory data protection and recovery
Permissions
- Create and manage recovery jobs for Entra directory data
- Manage backup snapshots and retention
- View backup job status and history
- Configure backup settings and schedules
- Restore directory objects from backup
Common use cases
- Restoring accidentally deleted users or groups
- Recovering from bulk directory changes
- Disaster recovery for Entra ID directory data
- Scheduled backup management for compliance
- Point-in-time recovery of directory objects
Best practices
- Test recovery procedures regularly
- Document backup schedules and retention policies
- Monitor backup job completion status
- Coordinate with identity team on recovery procedures
- Maintain runbooks for common recovery scenarios
Security considerations
- Recovery operations can restore deleted objects including privileged accounts
- Backup data may contain sensitive directory information
- Restoration could override recent intentional changes
- Monitor for unauthorized recovery attempts