> This page is for Data Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.eon.io/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.eon.io/_mcp/server.

# Create Microsoft Entra ID Backup Policies

A Microsoft Entra ID backup policy protects one Microsoft Entra ID tenant, capturing the whole directory as one snapshot on the schedule you set.

This article explains how to create a backup policy for a Microsoft Entra ID tenant.

## Create a backup policy for Microsoft Entra ID

You can create a backup policy from the

Backup Policies page

in the Eon console.
To get started, click **Create Backup Policy**.

#### Before you start

Before you create a Microsoft Entra ID backup policy, make sure you've connected the source tenant you want to back up.
See [Microsoft Entra ID: Connect Source Tenants] for instructions.

[Microsoft Entra ID: Connect Source Tenants]: /data-protection/saas-workloads/microsoft-entra-id/connections/connect-source-tenants

#### Name the policy

Provide a **Name** for the backup policy.

#### Choose the backup policy type

For **Backup source**, choose **SaaS application**.

In **Apply policy to**, choose **Entra ID**.
For more information on backup policy types, see [Backup policy types].

> **Note**
>
> These settings can't be changed after you continue.

Click **Continue**.

[Backup policy types]: /data-protection/backup-and-protection/backup-configuration/backup-policies/backup-policy-overview#backup-policy-types

#### Choose the tenant

In **Resource selection**, choose the Microsoft Entra ID tenant you want to back up.
Only tenants connected as a Microsoft Entra ID source tenant appear in the list, and each tenant can be assigned to only one Microsoft Entra ID backup policy.

Each snapshot covers the whole directory.
See [Directory scope] for what that includes.

The footer of this step shows the policy name and labels.
Optionally, add labels to the policy to allow filtering.
You add and remove labels next to **Backup policy name**.

Click  (Add label), type a label, and then press **Enter** or click   .
To remove a label, click the x icon on it.

Click **Next**.

[Directory scope]: /data-protection/backup-and-protection/backup-configuration/backup-policies/microsoft-entra-id/about-microsoft-entra-id-backup-policies#directory-scope

#### Set the backup schedule

In the **Schedules** step, set the frequency, the start time, the retention period, and the vault to store snapshots in.

Microsoft Entra ID snapshots must be saved to Azure vaults.

#### Save

When you're done, click **Create**.
Your policy begins backing up the tenant's directory according to the schedule you set.

## See also

* [About Microsoft Entra ID Backup Policies](/data-protection/backup-and-protection/backup-configuration/backup-policies/microsoft-entra-id/about-microsoft-entra-id-backup-policies)

* [Manage Backup Policies](/data-protection/backup-and-protection/backup-configuration/backup-policies/manage-backup-policies)

* [Backup Policy Overview](/data-protection/backup-and-protection/backup-configuration/backup-policies/backup-policy-overview)

* [Microsoft Entra ID Support](/data-protection/saas-workloads/microsoft-entra-id/microsoft-entra-id)