REWIND BACKUPS FOR MICROSOFT ENTRA ID. EARLY ACCESS

Back up Entra ID, recover what changed, keep people working.

Microsoft keeps Entra ID running. When a policy change reaches every app, you own the recovery. Resilience starts there: name the users, groups or roles you need and Rewind can restore exactly those.

organizations protected worldwide
0 +
of customer data safeguarded
0 PB+
days of backup history
0
What Rewind backs up

17 Microsoft Entra ID object types, so your directory has a version to go back to.

Users and groups

Users, groups, and group members, so the directory returns with its membership intact.

Applications

Applications across your tenant, backed up daily alongside the roles and policies that govern them.

Roles

Role definitions and role assignments, so you keep the record of who holds which privilege.

Administrative units

Administrative units with the members and the roles associated with each one.

Domains

Domains with the DNS records and service configuration records registered against them.

Devices

Devices registered in the directory, held in the same daily copy as everything else.

Conditional Access

Conditional Access policies and the named locations they use to decide where sign-in is allowed.

Policies

Activity-based timeout policy, authorization policy, and the authentication flows policy, in every daily backup.

Why it matters

Why identity needs a recovery plan of its own.

You own what is inside your tenant.
Microsoft runs the Entra ID directory and keeps it available. The users, groups, applications, roles and policies you configure inside it are yours to keep recoverable. Rewind holds an independent copy that you control, stored separately from Microsoft.
Auditors need backup evidence, tested procedures, and documented RTO and RPO targets. Having a copy of your data isn’t the same as being able to reconstruct it, and that difference is exactly what an audit tests for.
Entra ID can run perfectly while the configuration inside it has already moved. A green status page says the service is available. Resilience is putting a specific object back the way it was, on the day you need it.
Identity sits underneath everything else you run. One Conditional Access policy or a bulk group edit can change access across your whole organization. Rewind gives you the version from before the change.
Resilience

Restore On Request, run by Rewind support.

Restore On Request is part of Rewind Backups for Entra ID. Ask Rewind support, and they run the restore for you.

01

Your backups are already there.

Rewind has backed up your Entra ID tenant every day since you connected it, and keeps 365 days of history. The version you need is already in there.
02

You name what comes back.

Tell Rewind which objects you need and the date to bring them back to. Rewind support picks the request up from there, so your team can stay on the incident itself.
03

Rewind restores it into your tenant.

Restore On Request covers every resource Rewind backs up for Microsoft Entra ID. Rewind restores the objects you named from that date’s backup, into your own tenant.
Use cases

However things go wrong, Rewind helps you recover.

Recover from a bulk change that went too far

A cleanup script or a bulk edit reaches further than anyone planned for, and thousands of groups or application assignments change at once. Name what you need back and the date, and Rewind restores it.

Meet your compliance needs with confidence

Backups are encrypted in transit and at rest with AES-256, and every backup, restore, and export is written to an exportable audit log with 365 days of history. Rewind offers data residency in six regions.

Put a policy change back the way it was

Security teams tighten authentication and Conditional Access for good reasons, and a policy sometimes lands wider than intended. Rewind holds the version from the day before the change, ready to restore into your tenant.

Move on identity work with a way back

Rewind keeps a point-in-time copy of the directory, the applications, the groups and the policies. That copy turns a necessary security change into a reversible one, and gives your team room to keep moving.

Features

Everything included with Rewind Backups for Microsoft Entra ID

Backup

Recovery

Governance

Security & Compliance

More integrations

Rewind is the resilience layer for the platforms your organization runs on.

Okta

See pricing

Recover users, groups, applications, and policies.

Jira

See pricing

Recover work items, boards, workflows, and filters.

monday.com

See pricing

Back up boards, workspaces, users, and teams.

Protect your identities.
Recover with confidence.

Frequently Asked Questions

What organizations ask before they get started with Rewind Backups for Microsoft Entra ID.

What does Rewind back up for Microsoft Entra ID?
Rewind backs up your Microsoft Entra ID tenant across 17 object types: users, groups and group members, applications, role definitions and role assignments, administrative units with their members and roles, domains with their DNS and service configuration records, devices registered in the directory, Conditional Access policies, named locations, and the activity-based timeout, authorization and authentication flows policies.
Microsoft’s 30-day soft delete brings back recently deleted objects such as users, groups, applications and administrative units. Rewind keeps a full daily copy of the directory for 365 days, including role assignments, so a version from months ago is still there to restore. You choose the region, and the copy stays under your own control.
It is the ability to absorb a hit to a system the whole business runs through, and get moving again. Backup is the foundation. Resilience is putting a specific object back quickly, and showing an auditor you did. For Entra ID that means the directory, the applications, the roles and the policies.
You choose one of six regions: the United States, Canada, Germany, Switzerland, Australia or the United Kingdom. Backups run daily and Rewind keeps 365 days of history. Data is encrypted in transit and at rest with AES-256, and the roles you set in Rewind govern access.
Rewind Backups for Microsoft Entra ID is available through an early access program. Ask for early access and the Rewind team takes you through joining it. Once your tenant is connected, backups run daily and Rewind keeps 365 days of history. Restores work the same way throughout: you name the objects and the date, and Rewind support puts them back.