> This page is for Data Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.eon.io/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.eon.io/_mcp/server.

# Microsoft Entra ID: Connect Source Tenants

This article explains how to connect a Microsoft Entra ID source tenant so Eon can back up its directory.

Once the tenant is connected, each snapshot captures your users and groups together with the memberships, ownership, licenses, and role assignments that tie them together.
That's what lets you bring a deleted account back as a working identity later, instead of recreating it and its access by hand.

## Connect a source tenant

In this procedure, you'll grant Eon the read-only Microsoft Graph permissions it needs to back up the directory in the tenant.

You can connect a source tenant from the

SaaS applications

page, by clicking **New Connection** and selecting **Connect Microsoft Entra ID**.
The **Connect Microsoft Entra ID** panel opens.

#### Before you start

Before you connect a Microsoft Entra ID source tenant, make sure:

* You can sign in to the tenant as a Global Administrator.

* Your Azure tenant is set up in Eon.
  For instructions, see [Azure: Set Up Azure Tenants](/data-protection/cloud-workloads/azure/azure-tenants/set-up-azure-tenants).

#### Select your tenant

Select your tenant from the **Tenant ID** list.

#### Grant the permissions in Microsoft

1. Choose **Terraform** or **Bash** with the deployment toggle.
   Eon shows the read-only Microsoft Graph permissions it's requesting.

2. Sign in to the tenant as a Global Administrator and run the generated script:

   #### Bash

   Run the generated `entra_source_consent.sh` script.

   #### Terraform

   Apply the generated `main.tf` configuration using the AzureAD provider.

3. Select **I have granted the permissions in Microsoft**.

#### Confirm

Click **Connect**.

Eon connects the Microsoft Entra ID source tenant.
To start backing up its directory, assign the tenant to a [Microsoft Entra ID backup policy].

[Microsoft Entra ID backup policy]: /data-protection/backup-and-protection/backup-configuration/backup-policies/manage-backup-policies#create-a-backup-policy-for-microsoft-entra-id

## See also

* [Microsoft Entra ID Support]
* [About Source Accounts]
* [Microsoft Entra ID: Connect Restore Tenants]
* [Azure: Set Up Azure Tenants]

[Microsoft Entra ID Support]: /data-protection/saas-workloads/microsoft-entra-id/microsoft-entra-id

[About Source Accounts]: /data-protection/backup-and-protection/backup-configuration/source-accounts/about-source-accounts

[Microsoft Entra ID: Connect Restore Tenants]: /data-protection/saas-workloads/microsoft-entra-id/connections/connect-restore-tenants

[Azure: Set Up Azure Tenants]: /data-protection/cloud-workloads/azure/azure-tenants/set-up-azure-tenants