Control Monkey: Entra ID Hard-Delete Gap in Microsoft's Native Backup

Name: Control Monkey: Entra ID Hard-Delete Gap in Microsoft's Native Backup
Uploaded: 2026-10-05T12:05:16-04:00
Duration: 51 s
Description: Microsoft’s native Entra ID backup is a meaningful step forward — but not every Entra ID object is covered. In this clip, Gal explains the hard-delete coverage gap and why unsupported objects, such as custom roles, can create a serious recovery problem...

Control Monkey

10/05/2026

0 (0%)

Report Like Favorite

TL;DR

Microsoft's native Entra ID backup does not cover all object types, leaving custom roles and similar configurations without a true restore path.
A hard-deleted unsupported object cannot be gradually rolled back — recovery requires a full manual rebuild, creating significant operational risk.
The real evaluation question for identity teams is not whether backup exists, but which specific configurations are actually recoverable.

Summary

This short clip from a ControlMonkey presentation highlights a critical gap in Microsoft's native Entra ID backup: not all object types are covered. Speaker Gal focuses specifically on custom roles — configurations that teams may spend months fine-tuning — which are not protected by Microsoft's native backup. If a custom role is accidentally hard-deleted, there is no gradual rollback path. As Gal puts it, 'it's a cliff, not a slope.' The deletion is immediate and permanent for unsupported object types, turning what should be a simple restore into a full manual rebuild. The key takeaway for identity and security teams is that the existence of a backup capability does not guarantee complete coverage. Evaluating Entra ID backup requires understanding precisely which object types are protected and which are not. ControlMonkey positions its versioned snapshot approach as a way to close this gap and provide reliable recovery points for configurations that Microsoft's native tooling leaves unprotected.

Chapters

0:00 - Native Backup Coverage Gap
0:07 - Custom Role Risk Explained
0:33 - Hard Delete: No Recovery Path

Key Quotes

0:34 "It's a cliff, it's not a slope."
0:24 "Not a militia sector, not a rogue AI agent, the fat finger."
0:39 "It's a true problem that we have right now with a lot of those objects types that are not there right now."

FAQ

What types of Entra ID objects are not covered by Microsoft's native backup?

According to the clip, custom roles are one example of object types not protected by Microsoft's native Entra ID backup. When these objects are hard-deleted, recovery requires manual rebuilding rather than a simple restore.

Categories:

» Data Protection » Backup & Recovery
» Data Protection

Tags:

Show more Show less

TL;DR

Summary

Chapters

Key Quotes

FAQ

Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

Harnessing Data Governance for AI with Cyera and Snowflake