This section provides step-by-step instructions on how to use On Demand Recovery.

Note: For Microsoft 365 tenants: On Demand Recovery can backup and restore Microsoft 365 users, Microsoft 365 groups and security groups. Group membership and ownership is restored for both types of groups. The product does not restore any resources associated with Microsoft 365 groups and Microsoft Teams, such as conversations, Planner tasks and plans. Email notifications about failed backups can be enabled. Click here for more information.

Caution: Due to Microsoft Entra ID being a dynamic and rapidly evolving platform, its' associated APIs could be subject to updates or changes with limited notice, which may occasionally impact On Demand Recovery features. Quest will provide timely notification to customers in the event of any such impact. Please refer to Microsoft's official documentation and Microsoft Graph API changelog for any updates related to Entra ID APIs

1. Go to Quest On Demand and sign up for Quest On Demand. For more details, refer to Sign up for Quest On Demand.
2. Add your Microsoft Entra tenant as described in the Tenant Management section in the On Demand Global Settings User Guide.
3. After the tenant is added, make sure that the permissions required to work with Microsoft Entra tenant are granted. To grant the required permissions, click Go on the tenant tile and check that the Recovery module has the Granted status. For details, please see the Admin Consent Status section in the On Demand Global Settings User Guide. For a list of permissions that need to be granted consent for On Demand Recovery, refer to Consent permissions.

   Note: Microsoft admin consent status is "expired" after 90 days and the Recovery module status is changed to "Not Granted". Once expired, you must grant admin consent again to continue using the module.

4. To launch On Demand Recovery, click Recovery on the left pane. The Dashboard screen opens.
   
5. To configure a hybrid connection with on-premises Active Directory, see Integration with Recovery Manager for Active Directory.
6. To configure the backup settings, perform the following steps:
   1. Click Manage backups on the Dashboard screen.
   2. Select the tenant from the list and click Edit. The Configure backup dialog opens.
      
      
      • To enable the backup creation, select Enabled next to the Schedule option. On Demand Recovery will attempt up to 4 backups per day. Depending on the completion time required for each, the number of backups may be less.
      • Choose to immediately run the backup by selecting the Run backup immediately option. Deselecting this option will allow backups to only run when scheduled.
      • Specify the backup retention period using the Retention policy option in days. The backup retention policy is also applied to backups that are started manually. If no policy is set, the default retention policy is five years (1825 days). If the retention period is changed, the new policy will only affect new backups.
      • To backup Application Proxy settings, select the Backup Application proxy settings and connector groups option.
   3. Check the status of the module admin consent.
   4. If you need to run the backup creation manually, go to the Tasks screen, select the Backup task and click Start.
      
7. To view a list of tenants that have been granted consent to perform restore operations, go to the Manage restores section on the Restoring Objects page.
8. To start the backup creation manually, you can use the Create Backup option on the Dashboard screen.
9. To unpack a backup:
   1. Go to the Backups screen. Here, you will find each packed backup, and the properties associated with that backup.

      Note:The Users column reflects the total number of users including guest accounts. The Guest column reflects only guest accounts.

      

   2. From the Tenant drop-down list, select the tenant, then select the backup you want.
   3. You can specify predefined or custom date ranges to narrow the search results by selecting Custom range.
   4. Click Unpack in the actions menu.
   5. If the option Unpack service principals and devices is not selected, the unpack operation will work faster and the Differences report will contain only changes related to users and groups. For more details about this option, see Backup Unpacking.
      
   6. In the Backup Unpacking dialog, click Unpack.
10. When the Unpack backup task is completed, go to the Unpacked Objects screen and select the users and groups that you want to restore and click Restore.

    Note: If you do not unpack a backup, the Unpacked Objects screen will contain no objects or show a list of objects that were extracted from the previously unpacked backup.

11. In the Restore Objects dialog, select the options for restore. See the To restore objects section in the Restoring Objects page for information on each option.
    
12. Also, you can view differences between the selected backup and live Microsoft Entra ID or Microsoft 365 and revert the selected changes using the Differences report tool. For more details, see the Reporting section. You can export the selected report data to the CSV file.
13. You can view the status of your Restore objects task on the Tasks screen.
    
    
14. Open the Events screen to view errors or warnings, if they occur during the restore operation.
    • Use the Export option to export the selected log data to the CSV format.
    • Use the Acknowledge option to hide events that are not actual anymore. The status of acknowledged events is changed from 'Current' to 'Obsolete'. To view the list of obsolete events, click Obsolete on the left side of the screen.