EntraBackup.Read.All

Allows the app to read the Entra Backup configuration, list snapshots and jobs, and enumerate the changes of a specific preview job, on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the EntraBackup.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	56eda3c5-3834-4815-bd41-6f8fa1295247	a6ea9dd7-4dd9-4484-a80a-ac9ad981dcf1
DisplayText	Read Entra Backup configuration, preview jobs, and snapshots	Read Entra Backup configuration, preview jobs, and snapshots
Description	Allows the app to read the Entra Backup configuration, list snapshots and jobs, and enumerate the changes of a specific preview job.	Allows the app to read the Entra Backup configuration, list snapshots and jobs, and enumerate the changes of a specific preview job, on behalf of the signed-in user.
AdminConsentRequired	Yes	Yes

Graph Methods

• API [v1.0]
• API [beta]
• PowerShell [v1.0]
• PowerShell [beta]

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	GET /directory/recovery/snapshots
	GET /directory/recovery/snapshots/{snapshot-id}
	GET /directory/recovery/snapshots/{snapshot-id}/recoveryJobs/{job-id}/microsoft.graph.entraRecoveryServices.getFailedChanges
	GET /directory/recovery/snapshots/{snapshot-id}/recoveryPreviewJobs/{job-id}/microsoft.graph.entraRecoveryServices.getChanges

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

• recoveryChangeObjectBase
• recoveryPreviewJob
• snapshot

Graph reference: recoveryChangeObjectBase

Property	Type	Description
displayName	String	The display name of the changed object in its current state, used to uniquely identify the object. Supports $filter (eq, ne, startswith).
entityTypeName	microsoft.graph.entraRecoveryServices.resourceTypeName	The type of directory entity being modified. Supports $filter (eq, ne).
failureMessage	String	The error message if the change failed to apply. Only populated in getFailedChanges responses. null otherwise.
id	String	The unique identifier of the changed object. Supports $filter (eq, ne).
recoveryAction	microsoft.graph.entraRecoveryServices.recoveryAction	The type of recovery action to be performed on this object. Supports $filter (eq, ne).