This capability grants administrators a seven-day period to restore chosen identities prior to their permanent removal.
The feature is engineered to assist organizations when facing either accidental or malicious deletion of essential directory objects.
It provides support for several object types, including users not synchronized from on-premises systems, cloud-only groups, applications, and service principals.
Furthermore, Entra Agent ID objects are encompassed by this protection through their associated identity types.
This mechanism allows for a defined recovery window following deletion events within the directory infrastructure.
The implementation of such safeguards reflects a growing industry focus among market participants on mitigating operational risks related to identity lifecycle management.
Why it matters
This safeguard directly addresses operational risk by mitigating the impact of accidental or malicious identity deletion within the directory. For platform operators, this adds a critical layer of resilience against data loss in identity management systems.
