Microsoft Entra ID provides identity services that you use to access Microsoft cloud resources such as Microsoft 365, Azure Virtual Machines, and Azure Storage services.
With Druva, you can protect the following data from Microsoft Entra ID:
Users
Groups
Roles and permissions
Devices
Enterprise applications
App registrations
Administrative Units
Conditional Access Policies
For detailed information on this, see Microsoft Entra ID data that Druva protects.
Disabled users backed up | Needs License |
Yes | No |
Supported Environments for Entra ID
Entra ID support varies by environment, as outlined in the table below.
Environment Type | Entra ID Support |
Public Cloud | ✅ Supported |
Gov Cloud | ❌ Not Supported |
How should I get Entra ID enabled in my Druva Instance?
To enable Microsoft Entra ID data protection for your account, contact Druva Support or the Sales team. If you’re renewing a contract, ensure you reach out to Druva to continue protecting Entra ID along with your other workloads.
Get started
If you are ready to back up your Microsoft Entra ID data, here are the things that you need to get started.
Prerequisites
Druva needs permissions to access the Microsoft Entra ID tenant’s data. When you install Druva’s app for Microsoft Entra ID, ensure that it gets all the permissions it needs. For more information, see Permissions required for Microsoft Entra ID backup.
In order to provide consent for permissions, you need a Microsoft 365 Global Administrator account. You can revoke the global administrator permissions from the Microsoft 365 administrator’s account after you configure data protection with Druva, but ensure that the account is still active. For more information, see Protect your Microsoft 365 data - quick start guide.
In addition, Druva recommends that Cloud Key Management is enabled for your account. For more information, see Configure Cloud Key Management.
Protect Microsoft Entra ID data
If you have everything that you need, then you can configure backup for a Microsoft Entra ID tenant.
Identity Resiliency for Entra ID backed up data
Once you have configured backup for a Entra ID tenant and back up completes successfully, you can use the Identity Resiliency capability to investigate compromised identities, visualize attack paths via Druva MetaGraph, and restore configurations to a pre-compromise state.
To access Identity Resiliency feature, customers must possess an Identity workload license. We have introduced a new Identity ARR SKU, which can be purchased separately as a standalone offering or as part of a bundle. Contact your Account Manager or raise a case via Dru Assist to enable this feature.