BackupRestore-Configuration.Read.All
Allows the app to read the backup configuration, and list of Microsoft 365 service resources to be backed-up, on behalf of the signed in user.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
BackupRestore-Configuration.Read.Allpermission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReportcommand. See How To: Run a quick OAuth app audit of your tenant
| Category | Application | Delegated |
|---|---|---|
| Identifier | 5fbb5982-3230-4882-93c0-2167523ce0c2 | 444ed4b6-0554-4dc6-8e9c-3f9a34ee3ff6 |
| DisplayText | Read all backup configuration policies | Read backup configuration policies |
| Description | Allows the app to read all backup configurations, and lists of Microsoft 365 service resources to be backed-up, without a signed-in user. | Allows the app to read the backup configuration, and list of Microsoft 365 service resources to be backed-up, on behalf of the signed in user. |
| AdminConsentRequired | Yes | Yes |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
| Methods | |
|---|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
- driveProtectionRule
- driveProtectionUnit
- driveProtectionUnitsBulkAdditionJob
- exchangeProtectionPolicy
- mailboxProtectionRule
- mailboxProtectionUnit
- mailboxProtectionUnitsBulkAdditionJob
- oneDriveForBusinessProtectionPolicy
- protectionPolicyBase
- protectionRuleBase
- protectionUnitBase
- sharePointProtectionPolicy
- siteProtectionRule
- siteProtectionUnit
- siteProtectionUnitsBulkAdditionJob
Graph reference: driveProtectionRule
| Property | Type | Description |
|---|---|---|
| id | String | The unique identifier of the protection rule associated with the policy. |
| createdBy | identitySet entitySet | The identity of the person who created the rule. |
| createdDateTime | DateTimeOffset | The date and time that the rule was created. |
| driveExpression | String | Contains a drive expression. For examples, see driveExpression examples. |
| error | publicError | If the operation fails, contain the details of the error. |
| isAutoApplyEnabled | Boolean | true indicates that the protection rule is dynamic; false that it's static. Static rules run one time while dynamic rules listen to all changes in the system and update the protection unit list. Currently, only static rules are supported. |
| lastModifiedBy | identitySet | Identity of the person who last modified this rule. |
| lastModifiedDateTime | DateTimeOffset | The timestamp of the last modification to this rule. |
| status | protectionRuleStatus | The status of the protection rule. The possible values are: draft, active, completed, completedWithErrors, unknownFutureValue, updateRequested, deleteRequested. Use the Prefer: include-unknown-enum-members request header to get the following values in this evolvable enum: updateRequested , deleteRequested. The draft member is currently unsupported. Inherited from protectionRuleBase. |