PillarEngineering01 Sept 2026 · 9 min read
Backing Up Entra ID Means Backing Up Thirty-Three Kinds of Object
A directory is a graph, not a user list — and a restore has to put the relationships back
By Kapardyn EngineeringRead the article →
Backup, drift, conditional access, identity threat detection.
A directory is a graph, not a user list — and a restore has to put the relationships back
Microsoft Entra Conditional Access is a power tool with a sharp edge. Production is the wrong place to learn how the edge works.
Microsoft's native Entra Backup and Recovery covers a useful baseline. There is still a gap above that baseline, drift, simulation, cross-tenant operations, identity threat correlation, that an MSP at scale has to fill some other way.
Defender's identity protection covers the basics. The advanced patterns, token replay, brute-force-at-scale, federated-domain spoofing, need a layer above.