Entra ID Coverage Overview
Keepit offers two levels of Microsoft 365 Entra ID backup coverage:
- Entra ID Standard:
Protects users, groups, administrative units, and roles. - Entra ID Advanced:
Protects users, groups, administrative units, roles, service principals (including enterprise applications), app registrations, conditional access policies, Intune policies, BitLocker recovery keys, and sign-in and activity logs.
Keepit's legacy backup coverage:
- Entra ID Basic: Protects users, groups, administrative units, roles, and activity logs.
Supported Object Attributes
Each object (user, group, administrative unit, role, service principal, policy, and app registration) has a set of attributes that we protect. For the full list, go to Supported object attributes.
Entra ID Standard
Object Metadata
Users
- Ownerships
- Memberships
- Manager
- Role assignments
- Licenses
- Photo
Groups
- Owners
- Members
- Memberships
- Role assignments
- Licenses
- Photo
Administrative Units
- Members
- Scoped-role assignments
Roles
- Role assignments
Note: Ownerships, owners, memberships, members, managers, role assignments, or scoped-role assignments are relationships (links) an object has to another object.
Entra ID Advanced
In addition to the data covered by Entra ID Standard, the Entra ID Advanced connector also protects the following:
Object Metadata
App registrations
- Owners
- Photo
Service principals
- Owners
- Assignments
- Photo
Additional data
Policies
- Conditional access policies
- Compliance policies
- Configuration profiles
- Authentication methods
- Authentication strengths
- Named locations
Note: Due to API limitations, some types of configuration profiles cannot be backed up.
Devices
- Bitlocker recovery keys
Activity Logs
- Audit logs
- Sign-in logs
Note: Sign-in logs cannot be backed up without also backing up audit logs.