Supported Entra ID Item Properties

Veeam Data Cloud for Microsoft Entra ID protects the following items:

  • Entra ID objects with their properties
  • Microsoft Intune policies with their properties
  • Microsoft Intune RBAC roles with their properties
  • Entra ID audit logs
  • Entra ID interactive sign-in logs

This article lists all supported properties for the items that Veeam Data Cloud for Microsoft Entra ID protects.

Users

Veeam Data Cloud for Microsoft Entra ID protects the following Entra ID user properties.

Users

Property

Comments

AccountEnabled

—

AgeGroup

—

AppRoleAssignments

—

AssignedLicenses

—

BusinessPhones

—

City

—

CompanyName

—

ConsentProvidedForMinor

—

Country

—

CreatedDateTime

Read-only property in Entra ID.

Department

—

DirectReports

—

DisplayName

—

EmployeeId

—

EmployeeType

—

FaxNumber

—

GivenName

—

Identities

—

JobTitle

—

Mail

Microsoft Entra ID requires this property to be unique. You can only restore it if the value is not already assigned to another item.

MailNickname

—

Manager

—

MemberOf

—

MobilePhone

—

OfficeLocation

—

OnPremisesDistinguishedName

Read-only property in Entra ID.

OnPremisesDomainName

Read-only property in Entra ID.

OnPremisesExtensionAttributes

—

OnPremisesImmutableId

Microsoft Entra ID requires this property to be unique. You can only restore it if the value is not already assigned to another item.

OtherMails

—

OwnedObjects

Ownership of devices is read-only in EntraID.

PasswordPolicies

—

PostalCode

—

PreferredDataLocation

—

State

—

StreetAddress

—

Surname

—

UsageLocation

—

UserPrincipalName

Microsoft Entra ID requires this property to be unique. You can only restore it if the value is not already assigned to another item.

UserType

—

Note

Besides the listed properties, Veeam Data Cloud also protects role assignments for the users. This role assignment protection is available for Microsoft Entra ID P2 and Governance tenant licenses.

Groups

Veeam Data Cloud for Microsoft Entra ID protects the following Entra ID group properties.

Groups

Property

Comments

AppRoleAssignments

Not available for restore.

AssignedLabels

—

AssignedLicenses

—

Classification

—

CreatedDateTime

Read-only property in Entra ID.

Description

—

DisplayName

—

GroupTypes

—

IsAssignableToRole

Read-only property in Entra ID.

Mail

Read-only property in Entra ID.

MailEnabled

Read-only property in Entra ID.

MailNickname

Microsoft Entra ID requires this property to be unique. You can only restore it if the value is not already assigned to another item.

MemberOf

—

Members

Membership of devices is read-only in EntraID.

MembershipRule

—

MembershipRuleProcessingState

—

OnPremisesDomainName

Read-only property in Entra ID.

Owners

—

PreferredDataLocation

—

SecurityEnabled

—

Theme

—

Visibility

—

Administrative Units

Veeam Data Cloud for Microsoft Entra ID protects the following Entra ID administrative unit properties.

Administrative Units

Property

Comments

Description

—

Visibility

—

DisplayName

—

Extensions

Not supported for restore.

Members

Can be restored only for non-hidden administrative units.

ScopedRoleMembers

Limited to directory role membership, custom role membership is not supported.

Roles

Veeam Data Cloud for Microsoft Entra ID protects the following Entra ID role properties.

Roles

Property

Comments

Description

—

DisplayName

—

InheritsPermissionsFrom

—

IsBuiltIn

Read-only property in Entra ID.

IsEnabled

—

ResourceScopes

—

RolePermissions

—

TemplateId

—

Version

—

Applications and Service Principals

Veeam Data Cloud for Microsoft Entra ID protects the following properties of Entra ID applications and service principals.

Applications

Applications

Property

Comments

AddIns

—

Api

—

AppId

Read-only property in Entra ID.

ApplicationTemplateId

Read-only property in Entra ID.

AppRoles

—

Certification

Read-only property in Entra ID.

CreatedDateTime

Read-only property in Entra ID.

Description

—

DisabledByMicrosoftStatus

Read-only property in Entra ID.

DisplayName

—

ExtensionProperties

—

FederatedIdentityCredentials

—

GroupMembershipClaims

—

IdentifierUris

—

Info

—

IsDeviceOnlyAuthSupported

—

IsFallbackPublicClient

—

Notes

—

Oauth2RequirePostResponse

—

OptionalClaims

—

Owners

—

ParentalControlSettings

—

PublicClient

—

PublisherDomain

Read-only property in Entra ID.

RequestSignatureVerification

—

RequiredResourceAccess

—

SamlMetadataUrl

—

ServiceManagementReference

—

ServicePrincipalLockConfiguration

—

SignInAudience

—

Spa

—

Tags

—

TokenEncryptionKeyId

Read-only property in Entra ID.

VerifiedPublisher

Read-only property in Entra ID.

Web

—

Service Principals

Service Principals

Property

Comments

AccountEnabled

—

AddIns

Read-only property. The property value is inherited from the associated application.

AlternativeNames

—

AppDescription

Read-only property. The property value is inherited from the associated application.

AppDisplayName

Read-only property. The property value is inherited from the associated application.

AppId

Read-only property in Entra ID.

ApplicationTemplateId

Read-only property in Entra ID.

AppManagementPolicies

Read-only property in Entra ID.

AppOwnerOrganizationId

Read-only property in Entra ID.

AppRoleAssignedTo

—

AppRoleAssignmentRequired

—

AppRoleAssignments

—

AppRole

Read-only property. The property value is inherited from the associated application.

Description

—

DisabledByMicrosoftStatus

Read-only property in Entra ID.

DisplayName

Read-only property. The property value is inherited from the associated application.

Endpoints

—

FederatedIdentityCredentials

Read-only property in Entra ID.

Homepage

Read-only property. The property value is inherited from the associated application.

Info

Read-only property. The property value is inherited from the associated application.

LoginUrl

—

LogoutUrl

Read-only property in Entra ID.

MemberOf

—

Notes

—

NotificationEmailAddresses

—

Oauth2PermissionGrants

—

Oauth2PermissionScopes

Read-only property. The property value is inherited from the associated application.

OwnedObjects

Read-only property in Entra ID.

Owners

—

PasswordCredentials

Read-only property in Entra ID.

PreferredSingleSignOnMode

—

ReplyUrls

Read-only property in Entra ID.

ResourceSpecificApplicationPermissions

Read-only property in Entra ID.

SamlSingleSignOnSettings

—

ServicePrincipalNames

Read-only property. The property value is inherited from the associated application.

ServicePrincipalType

Read-only property in Entra ID.

SignInAudience

Read-only property in Entra ID.

Tags

—

TokenEncryptionKeyId

Read-only property in Entra ID.

VerifiedPublisher

Read-only property in Entra ID.

Conditional Access Policies

Veeam Data Cloud for Microsoft Entra ID protects the following properties of Entra ID Conditional Access policies.

Conditional Access Policies

Property

Comments

Conditions

—

CreatedDateTime

Read-only property in Entra ID.

DisplayName

—

GrantControls

—

ModifiedDateTime

Read-only property in Entra ID.

SessionControls

—

State

—

TemplateId

Read-only property in Entra ID.

Microsoft Intune Policies

Veeam Data Cloud for Microsoft Entra ID protects the following types of Microsoft Intune policies. For more information on supported properties for each policy type, see Supported Microsoft Intune Policy Properties.

Microsoft Intune Policies

Policy Type

Comments

AndroidCompliancePolicy

For details on supported properties, see AndroidCompliancePolicy.

AndroidCustomConfiguration

For details on supported properties, see AndroidCustomConfiguration.

AndroidGeneralDeviceConfiguration

For details on supported properties, see AndroidGeneralDeviceConfiguration.

AndroidWorkProfileCompliancePolicy

For details on supported properties, see AndroidWorkProfileCompliancePolicy.

AndroidWorkProfileGeneralDeviceConfiguration

For details on supported properties, see AndroidWorkProfileGeneralDeviceConfiguration.

IosCompliancePolicy

For details on supported properties, see IosCompliancePolicy.

IosCustomConfiguration

For details on supported properties, see IosCustomConfiguration.

IosDeviceFeaturesConfiguration

For details on supported properties, see IosDeviceFeaturesConfiguration.

IosGeneralDeviceConfiguration

For details on supported properties, see IosGeneralDeviceConfiguration.

IosUpdateConfiguration

For details on supported properties, see IosUpdateConfiguration.

MacOSCompliancePolicy

For details on supported properties, see MacOSCompliancePolicy.

MacOSCustomConfiguration

For details on supported properties, see MacOSCustomConfiguration.

MacOSDeviceFeaturesConfiguration

For details on supported properties, see MacOSDeviceFeaturesConfiguration.

MacOSGeneralDeviceConfiguration

For details on supported properties, see MacOSGeneralDeviceConfiguration.

SharedPCConfiguration

For details on supported properties, see SharedPCConfiguration.

Windows10CompliancePolicy

For details on supported properties, see Windows10CompliancePolicy.

Windows10CustomConfiguration

For details on supported properties, see Windows10CustomConfiguration.

Windows10EndpointProtectionConfiguration

For details on supported properties, see Windows10EndpointProtectionConfiguration.

Windows10EnterpriseModernAppManagementConfiguration

For details on supported properties, see Windows10EnterpriseModernAppManagementConfiguration.

Windows10GeneralConfiguration

For details on supported properties, see Windows10GeneralConfiguration.

Windows10MobileCompliancePolicy

For details on supported properties, see Windows10MobileCompliancePolicy.

Windows10SecureAssessmentConfiguration

For details on supported properties, see Windows10SecureAssessmentConfiguration.

Windows10TeamGeneralConfiguration

For details on supported properties, see Windows10TeamGeneralConfiguration.

Windows81CompliancePolicy

For details on supported properties, see Windows81CompliancePolicy.

Windows81GeneralConfiguration

For details on supported properties, see Windows81GeneralConfiguration.

WindowsDefenderAdvancedThreatProtectionConfiguration

For details on supported properties, see WindowsDefenderAdvancedThreatProtectionConfiguration.

WindowsPhone81CustomConfiguration

For details on supported properties, see WindowsPhone81CustomConfiguration.

WindowsPhone81GeneralConfiguration

For details on supported properties, see WindowsPhone81GeneralConfiguration.

WindowsUpdateForBusinessConfiguration

For details on supported properties, see WindowsUpdateForBusinessConfiguration.

Microsoft Intune RBAC Roles

Veeam Data Cloud for Microsoft Entra ID protects the following properties of Microsoft Intune RBAC roles.

Microsoft Intune RBAC Roles

Property

Comments

Description

—

DisplayName

—

Id

Read-only property in Entra ID.

IsBuiltIn

Read-only property in Entra ID.

RoleAssignments

—

RolePermissions

—

RoleScopeTagIds

—

RoleScopeTags

—

Note

For built-in Intune RBAC roles, the DisplayName, Description, and RolePermissions properties are read-only and cannot be restored. For such roles, only role assignments can be restored.

Organization Contacts

Veeam Data Cloud for Microsoft Entra ID protects the following properties of Entra ID organization contacts.

Organization Contacts

Property

Comments

Address

Read-only property in Entra ID.

CompanyName

Read-only property in Entra ID.

Department

Read-only property in Entra ID.

DirectReports

Read-only property in Entra ID.

DisplayName

Read-only property in Entra ID.

GivenName

Read-only property in Entra ID.

Id

Read-only property in Entra ID.

JobTitle

Read-only property in Entra ID.

Mail

Read-only property in Entra ID.

MailNickname

Read-only property in Entra ID.

Manager

Read-only property in Entra ID.

MemberOf

Read-only property in Entra ID.

OnPremisesLastSyncDateTime

Read-only property in Entra ID.

OnPremisesProvisioningErrors

Read-only property in Entra ID.

OnPremisesSyncEnabled

Read-only property in Entra ID.

Phones

Read-only property in Entra ID.

ProxyAddresses

Read-only property in Entra ID.

ServiceProvisioningErrors

Read-only property in Entra ID.

Surname

Read-only property in Entra ID.

Devices

Veeam Data Cloud for Microsoft Entra ID protects the following properties of Entra ID devices.

Devices

Property

Comments

AccountEnabled

Read-only property in Entra ID.

AlternativeSecurityIds

Read-only property in Entra ID.

ComplianceExpirationDateTime

Read-only property in Entra ID.

DeviceCategory

Read-only property in Entra ID.

DeviceId

Read-only property in Entra ID.

DeviceMetadata

Read-only property in Entra ID.

DeviceOwnership

Read-only property in Entra ID.

DeviceVersion

Read-only property in Entra ID.

DisplayName

Read-only property in Entra ID.

EnrollmentProfileName

Read-only property in Entra ID.

EnrollmentType

Read-only property in Entra ID.

Extensions

Read-only property in Entra ID.

IsCompliant

Read-only property in Entra ID.

IsManaged

Read-only property in Entra ID.

IsManagementRestricted

Read-only property in Entra ID.

IsRooted

Read-only property in Entra ID.

ManagementType

Read-only property in Entra ID.

Manufacturer

Read-only property in Entra ID.

MdmAppId

Read-only property in Entra ID.

MemberOf

Read-only property in Entra ID.

Model

Read-only property in Entra ID.

OnPremisesSecurityIdentifier

Read-only property in Entra ID.

OnPremisesSyncEnabled

Read-only property in Entra ID.

OperatingSystem

Read-only property in Entra ID.

OperatingSystemVersion

Read-only property in Entra ID.

PhysicalIds

Read-only property in Entra ID.

ProfileType

Read-only property in Entra ID.

RegisteredOwners

Read-only property in Entra ID.

RegisteredUsers

Read-only property in Entra ID.

RegistrationDateTime

Read-only property in Entra ID.

SystemLabels

Read-only property in Entra ID.

TrustType

Read-only property in Entra ID.

BitlockerRecoveryKeys

Read-only property in Entra ID.

Id

Read-only property in Entra ID.