After you enable backups for a Syncro Tenant, you can always make changes to which users are backed up and/or the user and/or Organization-level data that's backed up. Additionally, you can configure security permissions to control which Syncro Users can perform backup and restore-related tasks. 

This document describes how to configure backup settings for controlled yet integrated security.

Modify Users Or Data Being Backed Up

To modify which users and/or Organization-level data that's backed up, follow these steps:

1. Navigate to any Syncro Tenant's Details Page. 
2. In the Cloud Backups section, click Manage:
3. Select Backup Settings:
   
4. The “Choose Microsoft Services to Back Up” pop-up window appears. With the exception of the Storage Region (which cannot be modified after the initial set up), this is the same as described in Onboard a New Backup Customer.

Set Security Permissions

Administrators can specify security permissions that allow other Syncro Users to configure backups, monitor backups, and restore data from backups. These work exactly like all the other security permissions inside Syncro.

Here's a common model MSPs or IT teams can adopt:

• Tech Leaders/IT Directors have permission to configure backup settings and enable/disable backup for Microsoft 365 and Entra ID data.
• Technicians can view and monitor backup status, search for and restore data as needed.
• If applicable, you can give those in supporting roles permission to monitor backups and restore from backups.

For more information, see Configure Security Groups and Security Permissions Reference.

Note: For Syncro Users with appropriate permissions, logging into Syncro provides automatic access to the Backup Portal. However, users must sign out of each one individually to be fully logged out. Select the "Sign Out of Cloud Backup" option from the User Profile menu in the Backup Portal, and/or the "Sign Out" option from the User Profile menu in Syncro.

Create a Target Tenant

It's currently possible to restore data from backup to another Entra ID Tenant for the following objects:

• Users
• Groups
• Policies
• Custom Roles
• Devices (Devices, Configurations, and Policies)
• Admin Units
• Applications

To create a new Target Tenant that will appear in the Target Tenant dropdown menu, follow these steps:

1. Navigate to the Backup Portal using any Restore button from a Syncro Tenant's Details Page.
2. Make sure the page reads “Cloud Backup for Entra ID” in the upper left corner. If it doesn't, use the keypad () icon to switch.
3. In the upper right, select Target Tenants from your User Profile menu.
4. Click +Add Tenant Target.
5. Click Sign In With Microsoft 365 and fill in/select the Target Tenant's Global Admin account. The new Target Tenant displays in the list on the page and can now be used as a restore destination.