Microsoft Entra ID · Remaining Built-in Roles
Entra Backup Reader
Read-only access to Microsoft Entra Backup including listing preview jobs, recovery jobs, and backup snapshots. Can create preview jobs to assess recovery scope.
Scope: Read-only access to Entra Backup data and ability to create preview jobs
Permissions
- List all preview jobs and their status
- List all recovery jobs and their status
- View backup snapshots and details
- Create preview jobs to assess recovery scope
- Read backup configuration and settings
Common use cases
- Auditing backup coverage and compliance
- Assessing recovery scope before requesting a restore
- Monitoring backup job health and status
- Reporting on backup and recovery activities
Best practices
- Use for auditors and compliance teams
- Assign to identity team members who need visibility without restore capability
- Use preview jobs to validate backup completeness
Security considerations
- Can view backup data which may contain sensitive directory information
- Preview jobs show what would be restored without executing
- Lower risk than Backup Administrator — no restore capability