Skip to main content

If you’re looking to protect your Microsoft Entra ID (which you might remember as Azure Active Directory) with Veeam Backup & Replication, it’s actually pretty straightforward with version 12.3 and above. You’ll need to make sure you’ve got enough Veeam licensing (one unit per 10 users, all-or-nothing), and have the right infrastructure in place—Veeam will auto-install a local PostgreSQL database for tenant backups, and tenant logs can go to NAS or S3 storage like the 11:11 Cyber Vault. The protection process involves adding your Entra tenant to the Veeam inventory using your Tenant ID, setting up separate backup jobs for tenant data and logs (with encryption and tailored retention), and then scheduling them as needed. Once your jobs run, you can easily check exactly how many Veeam license units you need, thanks to a 30-day grace period. This setup gives you coverage for users, groups, devices, apps, role assignments, conditional access policies (if enabled), and all the relevant logs. If you’re already using 11:11 for M365 or other workloads, extending protection to Entra ID fits right in—just be sure to check for follow-up guidance on restoring data, too!

Read more on this subject and see a full walk through at https://1111systems.com/blog/protecting-entra-id-with-veeam/

Nice writeup there Jim; and with SCREENSHOTS! I like me some pictures! 😂 Will keep this handy if we ever go this route. Appreciate the share.


No stone left unturned.  Protect your EntraID!


This is a great feature been running this backup for a while and it works very well.  Great write-up Jim.