EntraBackup.Read.All

Allows the app to list the all the snapshots, jobs and enumerate the changes of a specific preview job, on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the EntraBackup.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	56eda3c5-3834-4815-bd41-6f8fa1295247	a6ea9dd7-4dd9-4484-a80a-ac9ad981dcf1
DisplayText	Read Preview jobs and snapshots	Read Preview jobs and snapshots
Description	Allows the app to list the all the snapshots, jobs and enumerate the changes of a specific preview job, on behalf of the signed-in user.	Allows the app to list the all the snapshots, jobs and enumerate the changes of a specific preview job, on behalf of the signed-in user.
AdminConsentRequired	Yes	Yes

Graph Methods

• API [v1.0]
• API [beta]
• PowerShell [v1.0]
• PowerShell [beta]

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

• recoveryChangeObjectBase
• recoveryPreviewJob
• Snapshot

Graph reference: recoveryChangeObjectBase

Property	Type	Description
displayName	String	The display name of the changed object in its current state, used to uniquely identify the object. Supports $filter (eq, ne, startswith).
entityTypeName	microsoft.graph.entraRecoveryServices.resourceTypeName	The type of directory entity being modified. The possible values are: user, group, conditionalAccessPolicy, namedLocationPolicy, authenticationMethodPolicy, authorizationPolicy, authenticationStrengthPolicy, application, servicePrincipal, unknownFutureValue, oAuth2PermissionGrant, appRoleAssignment. You must use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: oAuth2PermissionGrant, appRoleAssignment. Supports $filter (eq, ne).
failureMessage	String	The error message if the change failed to apply. Only populated in getFailedChanges responses. null otherwise.
id	String	The unique identifier of the changed object. Inherited from entity. Supports $filter (eq, ne).
recoveryAction	microsoft.graph.entraRecoveryServices.recoveryAction	The type of recovery action to be performed on this object. The possible values are: softDelete, update, restore, unknownFutureValue. Supports $filter (eq, ne).