On Demand Group Management security features are only one part of a secure environment. Customers must implement their own security practices when proceeding with data recovery. Special care needs to be given to protecting the credentials of the Azure Active Directory tenants global administrator accounts and the Active Directory administrator accounts.