Restoring Synchronized Users (Hybrid Identity)
Veeam Data Cloud for Microsoft Entra ID allows you to restore users that are synchronized with Microsoft Active Directory (hybrid identities). Unlike the synchronization software (for example, Microsoft Entra Connect), restore with Veeam Data Cloud preserves relations stored in your Entra ID tenant: group memberships, assigned roles, used licenses and other relations.
Veeam Data Cloud for Microsoft Entra ID restores only the supported properties and relations. For details, see Supported Entra ID Item Properties. To restore other properties, you still need synchronization software and, in some cases, local Active Directory restore. This section describes possible scenarios and steps for restore.
Restoring Users Removed from Entra ID Without Subsequent Synchronization
If a synchronized user was removed only from Entra ID, and there was no synchronization process after the removal, do the following:
- In Veeam Data Cloud for Microsoft Entra ID, use the Restore Users wizard to restore an entire user to Entra ID. At the Options step of the wizard, make sure to enable the Keep Relationships option. For details on user restore, see Restoring Entire Users.
Veeam Data Cloud will restore the user with a new object ID.
- Wait for or launch synchronization with Active Directory, for example, using Microsoft Entra Connect.
After the synchronization, the relations restored using Veeam Data Cloud will be preserved, the existing properties will be overwritten, and the lacking properties will be restored. The user will become a hybrid identity.
Restoring Users Removed from Entra ID with Subsequent Synchronization
If a synchronized user was removed only from Entra ID, but the synchronization process has already restored this user, Veeam Data Cloud will not be able to map this user and restore the relationships. In this case, do the following:
- Remove from Entra ID the user that was created after the synchronization.
- In Veeam Data Cloud for Microsoft Entra ID, use the Restore Users wizard to restore the entire user to Entra ID. At the Options step of the wizard, make sure to enable the Keep Relationships option. For details on user restore, see Restoring Entire Users.
Veeam Data Cloud will restore the user with a new object ID.
- Wait for or launch synchronization with Active Directory, for example, using Microsoft Entra Connect.
After the synchronization, the relations restored using Veeam Data Cloud will be preserved, the existing properties will be overwritten, and the lacking properties will be restored. The user will become a hybrid identity.
Restoring Users Removed from Entra ID and Active Directory
If a synchronized user was removed from Entra ID and Active Directory, do the following:
- In Veeam Data Cloud for Microsoft Entra ID, use the Restore Users wizard to restore an entire user to Entra ID. At the Options step of the wizard, make sure to enable the Keep Relationships option. For details on user restore, see Restoring Entire Users.
Veeam Data Cloud will restore the user with a new object ID.
- Use Veeam Backup & Replication application item restore or Veeam Explorer for Microsoft Active Directory to restore the user locally in Active Directory. For details, see the Application Item Restore section of the Veeam Backup & Replication User Guide and the Veeam Explorer for Microsoft Active Directory section of the Veeam Explorers User Guide.
- Wait for or launch synchronization with Active Directory, for example, using Microsoft Entra Connect.
After the synchronization, the relations restored using Veeam Data Cloud will be preserved, the existing properties will be overwritten, and the lacking properties will be restored. The user will become a hybrid identity.