Considerations and Limitations

When you plan to deploy and configure Veeam Backup for Microsoft Entra ID, keep in mind the following limitations and considerations.

Infrastructure

Veeam Backup for Microsoft Entra ID can use only the default general-purpose backup proxy. This proxy is deployed during Veeam Backup & Replication installation. If you delete this proxy, Microsoft Entra ID tenant backup and log backup will not be possible. For more information on the architecture, see Solution Architecture.
One backup server can work only with one Microsoft Entra ID backup repository. For more information on the architecture, see Solution Architecture.

Tenant Backup and Restore

For one Microsoft Entra ID tenant, you can create only one tenant backup job. One tenant backup job can protect only one tenant.
The backup copy feature does not work for tenant backups. To protect the backups, you need to protect the Microsoft Entra ID backup repository based on the PostgreSQL instance. For this, you can use the native PostgreSQL pg_dump method or create the VM or Veeam Agent backup of the machine where the Microsoft Entra ID backup repository is located. In the backup job, enable application-aware processing.
You can restore items of one type only. For example, only users or only groups, not users and groups.

Log Backup and Restore

You cannot back up sign-in logs with Microsoft Entra ID free license. With this license, you can back up only audit logs.
To create a log backup, you must have the backup of the tenant whose logs you want to protect. The latest restore point of this backup must be created within 30 days before the log backup.