Microsoft Finally Gives Entra ID a Backup Button — But There’s a Catch

Microsoft just Entra ID something it’s never had before: a native backup button. And not just any backup. One that’s tamper-proof, meaning not even a Global Admin can delete it. But there’s a catch. Also in Entra, cross-tenant security group sync is going GA this month, finally letting you manage groups centrally across multiple tenants. But it’s locked behind a premium licence that isn’t included in E3 or E5. And finally, Microsoft just flipped Copilot Studio’s multi-agent orchestration to generally available, meaning AI agents can now delegate work to other agents, including third-party agents outside Microsoft’s ecosystem.

Thanks to Cayosoft for sponsoring this episode!

Links and resources

• Microsoft Entra Backup and Recovery overview – Microsoft Entra | Microsoft Learn
• MC1198077 – Microsoft Entra: Cross-tenant security group synchronization | Microsoft 365 Message Center Archive
• What’s new in Copilot Studio: Updates to multi-agent systems | Microsoft Copilot Blog

Episode overview

In this week’s episode:

• Microsoft Entra ID finally gets native, tamper‑proof backups — daily automated backups for key Entra objects arrive, but with a surprisingly short five‑day retention window and notable gaps like missing Intune coverage.
• Cross‑tenant security group sync goes GA — long‑awaited Entra cross‑tenant group synchronisation is rolling out, aimed at M&A and multi‑tenant scenarios, but locked behind premium licensing and complex setup requirements.
• Copilot Studio unlocks multi‑agent orchestration — AI agents can now delegate work to other agents, including third‑party ones, raising the stakes for governance, DLP, and human‑in‑the‑loop controls.