Microsoft 365 Backup Administrator
Enabled
Description
Back up and restore content across supported services (SharePoint, OneDrive, and Exchange Online) in Microsoft 365 Backup
Details
Assign the Microsoft 365 Backup Administrator role to users who need to do the following tasks:
- Manage all aspects of Microsoft 365 Backup
- Back up and restore content across SharePoint, OneDrive, and Exchange Online
- Create, edit, and manage backup configuration policies for SharePoint, OneDrive, and Exchange Online
- Perform restore operations for SharePoint, OneDrive, and Exchange Online
Directory Actions8
microsoft.azure.serviceHealth/allEntities/allTasksmicrosoft.azure.supportTickets/allEntities/allTasksmicrosoft.backup/allEntities/allProperties/allTasksmicrosoft.office365.network/performance/allProperties/readmicrosoft.office365.serviceHealth/allEntities/allTasksmicrosoft.office365.supportTickets/allEntities/allTasksmicrosoft.office365.usageReports/allEntities/allProperties/readmicrosoft.office365.webPortal/allEntities/standard/read
Graph API Permissions17
Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.
BackupRestore-Monitor.Read.AllBackupRestore-Restore.Read.AllChangeManagement.Read.AllDirectory.Read.AllEntraBackup.Read.AllEntraBackup.ReadWrite.PreviewEntraBackup.ReadWrite.RecoveryNetworkAccess-Reports.Read.AllReports.Read.AllReportSettings.Read.AllServiceActivity-Exchange.Read.AllServiceActivity-Microsoft365Web.Read.AllServiceActivity-OneDrive.Read.AllServiceActivity-Teams.Read.AllServiceHealth.Read.AllServiceMessage.Read.AllServiceMessageViewpoint.Write