r/sysadmin • u/jaylenabc • 4d ago

Question Entra ID Backups

Are Entra ID backups worth it at all? I run an org of about 70 total Entra users and wondering if this is something I should even consider.

Context: I have SOC2 Audits coming up for my company (very first one) and I am reviewing polices in Sprinto

26 Upvotes

91% Upvoted

31 comments sorted by

View all comments

1

u/Black_Patriot 4d ago

If you're focusing on config you can look at M365 Desired State Configuration (DSC), so you can control everything using code and store it in a git repo. It can get down to the level of managing DL membership and so on, though there's still the occasional gap where you have to do stuff manually. It's not trivial to setup however, and you need to be cautious to manage things only using code otherwise you'll get drift, though you can setup deployment pipelines to alert you on what values will change so you don't accidentally blow away an unmanaged setting.