This is a pre-notification that new permissions will be added to the On Demand Recovery Restore application in approximately one month from time of notice. Additional permissions are required for new features: the restore of tenant-level settings for users, groups, and administrative units.
To accept these new permissions, consent will need to be re-granted for your organization.
What is changing and why?
On Demand Recovery will be introducing a new feature to back up and restore tenant-level settings for users, groups, and administrative units. To perform a restore operation on these settings, the following new permissions will be added to the Restore application:
Policy.ReadWrite.Authorization – Restore of user authorization settings for a tenant
Policy.ReadWrite.AuthenticationFlows – Restore of user authentication settings for a tenant
Policy.ReadWrite.ExternalIdentities – Restore of external identities setting for a tenant
AdministrativeUnit.ReadWrite.All – Restore of administrative units
The re-granting of consent is only required for this new functionality. Existing restore operations will continue to operate as usual.
Action Required:
No immediate action needs to be taken, however please ensure that a privileged account with Global Administrator permissions has been provisioned in preparation of the re-granting of consent for the Restore application.
The status and consent version for the Restore application will indicate when the new permissions are available. New permissions will be added to consent version 1.7, where the re-granting of consent will be required. To view details and verify consent version, go to the “Office 365 Tenants” tab on the Tenants page in Quest On Demand, and click on “View Details” under “Status and Actions” for Restore.
The following list shows the tenants in this organization that you need to review:
{{OrganizationName}} ({{OrganizationId}})
For more information, please contact Quest Support.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center
