ESC
Type to search...

BackupRestore-Control.Read.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Full Control All Resources

Allows the app to read the status of M365 backup service (enable/disable), without signed in user

In short

BackupRestore-Control.Read.All is available as both an application permission and a delegated permission in the Microsoft Graph API, grouped under the BackupRestore-Control category. Allows the app to read the status of M365 backup service (enable/disable), without signed in user It grants full control over resources. Application permissions always require admin consent.

Permission data: October 3, 2026 at 3:19 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read the status of the M365 backup service

Allows the app to read the status of M365 backup service (enable/disable), without signed in user

Delegated Permission Admin consent required

Read the status of the M365 backup service

Allows the app to read the status of M365 backup service (enable/disable), on behalf of the signed in user.

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
additionalEvents notificationEventsType Indicates whether to opt in to additional policy and restore updates. Possible values: none, restoreAndPolicyUpdates, unknownFutureValue.
isEnabled Boolean Indicates whether notifications are enabled.
recipients notificationRecipients The notificationRecipients object that specifies the recipients who receive the notifications.
id string The unique identifier for an entity. Read-only.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation
{
  "@odata.type": "#microsoft.graph.emailNotificationsSetting",
  "additionalEvents": "String",
  "isEnabled": "Boolean",
  "recipients": {
    "@odata.type": "microsoft.graph.notificationRecipients"
  }
}

Relationships

Microsoft Graph v1.0 schema-derived

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
additionalEvents notificationEventsType Related additionalEvents data exposed by this resource.
recipients notificationRecipients Related recipients data exposed by this resource.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /solutions/backupRestore
GET /solutions/backupRestore/emailNotificationsSetting
GET /solutions/backupRestore/serviceApps
GET /solutions/backupRestore/serviceApps/{serviceAppId}
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /solutions/backupRestore
GET /solutions/backupRestore/emailNotificationsSetting
GET /solutions/backupRestore/serviceApps
GET /solutions/backupRestore/serviceApps/{serviceAppId}
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgSolutionBackupRestore /solutions/backupRestore
Get backupRestoreRoot
Get-MgSolutionBackupRestoreServiceApp /solutions/backupRestore/serviceApps
List serviceApps
Get-MgSolutionBackupRestoreServiceApp /solutions/backupRestore/serviceApps/{serviceAppId}
Get serviceApp
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaSolutionBackupRestore /solutions/backupRestore
Get backupRestoreRoot
Get-MgBetaSolutionBackupRestoreEmailNotificationSetting /solutions/backupRestore/emailNotificationsSetting
Get emailNotificationsSetting
Get-MgBetaSolutionBackupRestoreServiceApp /solutions/backupRestore/serviceApps
List serviceApps
Get-MgBetaSolutionBackupRestoreServiceApp /solutions/backupRestore/serviceApps/{serviceAppId}
Get serviceApp

Code Examples

C# / .NET SDK
Get backupRestoreRoot
// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Solutions.BackupRestore.GetAsync();
JavaScript
Get backupRestoreRoot
const options = {
	authProvider,
};

const client = Client.init(options);

let backupRestoreRoot = await client.api('/solutions/backupRestore')
	.get();
PowerShell
Get backupRestoreRoot
Import-Module Microsoft.Graph.BackupRestore

Get-MgSolutionBackupRestore
Python
Get backupRestoreRoot
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.solutions.backup_restore.get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for BackupRestore-Control.Read.All

4

Grant Admin Consent

Application permissions always require admin consent.

Frequently asked questions

What is the BackupRestore-Control.Read.All Microsoft Graph permission?

BackupRestore-Control.Read.All is available as both an application permission and a delegated permission in the Microsoft Graph API, grouped under the BackupRestore-Control category. Allows the app to read the status of M365 backup service (enable/disable), without signed in user It grants full control over resources. Application permissions always require admin consent. It is mapped to the Microsoft Graph emailnotificationssetting resource type. 8 documented Microsoft Graph REST methods require it. 7 Microsoft Graph PowerShell commands are documented for it.

Is BackupRestore-Control.Read.All an application or a delegated permission?

BackupRestore-Control.Read.All is available as both an application permission (app-only access, no signed-in user) and a delegated permission (access on behalf of a signed-in user).

Does BackupRestore-Control.Read.All require admin consent?

Application permissions always require admin consent.

What is the permission ID (GUID) for BackupRestore-Control.Read.All?

For BackupRestore-Control.Read.All, the application (app role) ID is 6fe20a79-0e15-45a1-b019-834c125993a0, and the delegated (OAuth2 scope) ID is af598c63-4292-4437-b925-e996354d3854. These are the real Microsoft Graph identifiers and can be used directly in an app registration manifest.