Return
-
Title
Can Azure AD Guest Users (from other Azure domains) execute backup/restore operations? -
Description
Can Azure AD Guest Users (from other Azure domains) execute backup/restore operations?
-
Cause
Guest accounts with proper Directory Roles can grant consent successfully, but API calls fail when using tokens obtained from guest account consent.
-
Resolution
Backup and restore operations require consent to be granted using an account associated with the same Azure tenant. Attempts to use accounts from different Azure domains (such as guest accounts) for consent are not supported and will lead to backup or restore failures.
Recommendation
To ensure successful backup and restore operations, it is recommended to use an account that resides within the same Azure tenant where the operations are executed.