EntraBackup.ReadWrite.Recovery
Allows the app to list the all the snapshots, create a recovery job and enumerate the changes of a specific recovery job, on behalf of the signed-in user.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
EntraBackup.ReadWrite.Recoverypermission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReportcommand. See How To: Run a quick OAuth app audit of your tenant
| Category | Application | Delegated |
|---|---|---|
| Identifier | - | 8269c6ff-41d7-4172-a783-b2ce38322e42 |
| DisplayText | - | Create preview and recovery job, read recovery job and snapshots |
| Description | - | Allows the app to list the all the snapshots, create a recovery job and enumerate the changes of a specific recovery job, on behalf of the signed-in user. |
| AdminConsentRequired | Yes | Yes |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
| Methods |
|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
Graph reference: recoveryJob
| Property | Type | Description |
|---|---|---|
| filteringCriteria | microsoft.graph.entraRecoveryServices.recoveryJobFilteringCriteriaBase | Optional filtering criteria used to scope the job to specific entity types or entity IDs. Inherited from recoveryJobBase. |
| id | String | The unique identifier for the job. Inherited from entity. Supports $filter (eq, ne). |
| jobCompletionDateTime | DateTimeOffset | The date and time when the job completed. Null if the job is still running. Inherited from recoveryJobBase. |
| jobStartDateTime | DateTimeOffset | The date and time when the job started. Inherited from recoveryJobBase. |
| status | microsoft.graph.entraRecoveryServices.recoveryStatus | The current status of the job. Inherited from recoveryJobBase. The possible values are: initialized, running, successful, failed, abandoned, unknownFutureValue, calculating, loadingData. You must use the Prefer: include-unknown-enum-members request header to get the following values from this evolvable enum: calculating, loadingData. Supports $filter (eq, ne). |
| targetStateDateTime | DateTimeOffset | The target snapshot timestamp to which the tenant is being restored. Inherited from recoveryJobBase. Supports $filter (eq, ne). |
| totalChangedLinksCalculated | Int32 | The total count of changed directory object links (relationships) calculated by the job. null until the job completes calculation. This value can differ from totalLinksModified because some link changes may fail to apply during recovery. Inherited from recoveryJobBase. |
| totalChangedObjectsCalculated | Int32 | The total count of changed directory objects calculated by the job. null until the job completes calculation. This value can differ from totalObjectsModified because some object changes may fail to apply during recovery. Inherited from recoveryJobBase. |
| totalFailedChanges | Int32 | The count of changes (including both objects and links) that failed to apply during recovery. |
| totalLinksModified | Int32 | The count of directory object links (relationships) that were successfully modified during recovery. This value may be less than totalChangedLinksCalculated if some link changes failed. |
| totalObjectsModified | Int32 | The count of directory objects that were successfully modified during recovery. This value may be less than **t |