---
title: "New-VBREntraIDTenantProtectedScope"
description: "Specifies the scope of resources that will be protected for a specific Microsoft Entra ID tenant."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/new-vbrentraidtenantprotectedscope.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Microsoft EntraID Support > Infrastructure Components > New-VBREntraIDTenantProtectedScope"
dateModified: "2026-08-19"
---

# New-VBREntraIDTenantProtectedScope

## Short Description
Specifies the tenant protection scope.

**Product Edition**: Standard, Enterprise, Enterprise Plus, Veeam Universal License

## Syntax
```
New-VBREntraIDTenantProtectedScope [-ResourceType <VBREntraIDResourceType[]>] [<CommonParameters>]
```

## Detailed Description
Specifies the scope of resources that will be protected for a specific Microsoft Entra ID tenant.

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">ResourceType</span></p>
        </td>
        <td>
          <p>Specifies the types of resources that will be protected for the tenant.</p><p>Depending on the resources you want to add to the protection scope, you can set the following resource types:</p><ul><li><code>Users</code></li><li><code>Groups</code></li><li><code>AdminUnits</code></li><li><code>Roles</code></li><li><code>Apps</code></li><li><code>Logs</code></li><li><code>ConditionalAccessPolicies</code></li><li><code>IntunePolicies</code></li><li><code>OrgContacts</code></li><li><code>Devices</code></li></ul>
        </td>
        <td style="width:10%;">
          <p><code>VBREntraIDResourceType[]</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
The cmdlet returns the [`VBREntraIDTenantProtectedScope`](vbrentraidtenantprotectedscope.md) object that defines the tenant protection scope.

## Examples

::: example
### Specifying Entra ID Tenant Protection Scope

This example adds to the protection scope all users, groups, conditional access policies and devices of the tenant.

```
New-VBREntraIDTenantProtectedScope -ResourceType Users, Groups, ConditionalAccessPolicies, Devices
```

:::

## Related Commands

- [`Add-VBREntraIDTenant`](add-vbrentraidtenant.md)
- [`Set-VBREntraIDTenant`](set-vbrentraidtenant.md)