Microsoft Entra ID
MonitoringBackup Difference Report Recovery Model
In brief
Administrators can configure Hard Deletion Protection to block permanent deletion of supported objects during the first seven days after soft deletion.
What Entra admins need to know
Consider configuring it to help prevent unrecoverable hard deletions.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Backup and Recovery doesn't create new objects or hard-delete objects from your tenant.
For soft-deleted users, Microsoft 365 Groups, cloud security groups, application registrations, and service principals, you can also use soft deletion within the 30-day retention window.
@@ -81,7 +81,7 @@ The type of change from the backup state determines the recovery action: Backup and Recovery doesn't create new objects or hard-delete objects from your tenant. > [!WARNING]-> Hard-deleted objects can't be recovered. Configure [protected actions](/entra/identity/role-based-access-control/protected-actions-overview) to prevent unwanted hard deletions.+> Hard-deleted objects can't be recovered. [Configure Hard Deletion Protection](configure-hard-deletion-protection.md) to block permanent deletion of supported objects during the first seven days after they're soft deleted. You can also configure [protected actions](/entra/identity/role-based-access-control/protected-actions-overview) to protect hard-deletion permissions. For soft-deleted users, Microsoft 365 Groups, cloud security groups, application registrations, and service principals, you can also use [soft deletion](soft-deletion.md) within the 30-day retention window.