BackupRestore-Control.ReadWrite.All

Permission Details

Application Permission

Update or read the status of the M365 backup service

Allows the app to update or read the status of M365 backup service (enable/disable), without signed in user

Permission ID: fb240865-88f8-4a1d-923f-98dbc7920860

Delegated Permission

Update or read the status of the M365 backup service

Allows the app to update or read the status of M365 backup service (enable/disable), on behalf of the signed in user.

Permission ID: 96d46335-d92d-41b8-bc9f-273a692381ea

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property	Type	Description
`application`	`identity`	The Entra ID application ID.
`effectiveDateTime`	`DateTimeOffset`Nullable	Timestamp of the effective activation of the service app.
`id`	`String`	The unique identifier of the service app.
`lastModifiedBy`	`identitySet`	Identity of the person who last modified the entity.
`lastModifiedDateTime`	`DateTimeOffset`Nullable	Timestamp of the last modification of the entity.
`registrationDateTime`	`DateTimeOffset`Nullable	Timestamp of the creation of the service app entity.
`status`	`serviceAppStatus`	The status of the service app. This value indicates whether or not the application can be used to control the backup service. The possible values are: inactive, active, pendingActive, pendingInactive, unknownFutureValue.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation

{
  "@odata.type": "#microsoft.graph.serviceApp",
  "id": "String (identifier)",
  "status": "String",
  "registrationDateTime": "String (timestamp)",
  "effectiveDateTime": "String (timestamp)",
  "lastModifiedDateTime": "String (timestamp)",
  "lastModifiedBy": {
    "@odata.type": "microsoft.graph.identitySet"
  },
  "application": {
    "@odata.type": "microsoft.graph.identity"
  }
}

Relationships

Relationships metadata is not available for this permission mapping.

View resource documentation

Graph Methods

Delegated access App-only access

Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/solutions/backupRestore/serviceApps`
POST `/solutions/backupRestore/enable`
POST `/solutions/backupRestore/serviceApps`
POST `/solutions/backupRestore/serviceApps/{serviceAppId}/activate`
POST `/solutions/backupRestore/serviceApps/{serviceAppId}/deactivate`
DELETE `/solutions/backupRestore/serviceApps/{serviceAppId}`

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/solutions/backupRestore/serviceApps`
POST `/solutions/backupRestore/enable`
POST `/solutions/backupRestore/serviceApps`
POST `/solutions/backupRestore/serviceApps/{serviceAppId}/activate`
POST `/solutions/backupRestore/serviceApps/{serviceAppId}/deactivate`
PATCH `/solutions/backupRestore/emailNotificationsSetting`
DELETE `/solutions/backupRestore/serviceApps/{serviceAppId}`

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgSolutionBackupRestoreServiceApp` /solutions/backupRestore/serviceApps List serviceApps
`Invoke-MgDeactivateSolutionBackupRestoreServiceApp` /solutions/backupRestore/serviceApps/{serviceAppId}/deactivate serviceApp: deactivate
`New-MgSolutionBackupRestoreServiceApp` /solutions/backupRestore/serviceApps Create serviceApp
`Remove-MgSolutionBackupRestoreServiceApp` /solutions/backupRestore/serviceApps/{serviceAppId} Delete serviceApp

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgBetaSolutionBackupRestoreServiceApp` /solutions/backupRestore/serviceApps List serviceApps
`Invoke-MgBetaDeactivateSolutionBackupRestoreServiceApp` /solutions/backupRestore/serviceApps/{serviceAppId}/deactivate serviceApp: deactivate
`New-MgBetaSolutionBackupRestoreServiceApp` /solutions/backupRestore/serviceApps Create serviceApp
`Remove-MgBetaSolutionBackupRestoreServiceApp` /solutions/backupRestore/serviceApps/{serviceAppId} Delete serviceApp
`Update-MgBetaSolutionBackupRestoreEmailNotificationSetting` /solutions/backupRestore/emailNotificationsSetting Update emailNotificationsSetting

Code Examples

C# / .NET SDK

backupRestoreRoot: enable

View official example on Microsoft Learn

// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Solutions.BackupRestore.Enable;

var requestBody = new EnablePostRequestBody
{
	AppOwnerTenantId = "23014d8c-71fe-4d00-a01a-31850bc5b42a",
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Solutions.BackupRestore.Enable.PostAsync(requestBody);

JavaScript

backupRestoreRoot: enable

View official example on Microsoft Learn

const options = {
	authProvider,
};

const client = Client.init(options);

const serviceStatus = {
    appOwnerTenantId: '23014d8c-71fe-4d00-a01a-31850bc5b42a'
};

await client.api('/solutions/backupRestore/enable')
	.post(serviceStatus);

PowerShell

backupRestoreRoot: enable

View official example on Microsoft Learn

Import-Module Microsoft.Graph.BackupRestore

$params = @{
	appOwnerTenantId = "23014d8c-71fe-4d00-a01a-31850bc5b42a"
}

Enable-MgSolutionBackupRestore -BodyParameter $params

Python

backupRestoreRoot: enable

View official example on Microsoft Learn

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.solutions.backuprestore.enable.enable_post_request_body import EnablePostRequestBody
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = EnablePostRequestBody(
	app_owner_tenant_id = "23014d8c-71fe-4d00-a01a-31850bc5b42a",
)

result = await graph_client.solutions.backup_restore.enable.post(request_body)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for BackupRestore-Control.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent.