AzureFeeds

Microsoft 365 Backup can help strengthen your organization’s native safety net; it’s built directly into the platform you already trust, designed to recover your Microsoft Exchange Online, SharePoint, and OneDrive data fast when it matters most. It can be used through the Microsoft 365 admin center, and via partner applications built on the Microsoft 365 Backup Storage platform.

Here are 10 things that you should know before you enable it.

1. Resiliency with compliance built in

Protect your data without compromising on compliance.

Microsoft 365 Backup delivers data resiliency and all backup data stays within the Microsoft 365 trust boundary, in the same region and with the same data residency requirements as your live content.

Whether your organization operates under GDPR, data sovereignty mandates, or industry-specific regulations, your backup data inherits the same compliance posture as the content it protects. This is unlike export-based backup solutions, where you must apply separate compliance controls and requirements.

Learn more about privacy, security, and compliance in Microsoft 365 Backup

2. Fast restore speeds – up to 1–3 TB per hour

When something goes wrong, speed is everything.

Microsoft 365 Backup delivers restore speeds of approximately 2 terabytes per hour*, assuming an approximately 1k site parallel restore session with sites following a normal distribution of sizes. (See performance expectations for more details.)

For SharePoint and OneDrive, fast restore points typically complete in 2-20 minutes, though very large sites and accounts (such as multi-TB sites) may take an hour or more. Exchange mailbox restores process at roughly 200 to 500 items per minute per mailbox. (See performance expectations for more details.)

When you’re under pressure to get your organization back online, that speed makes all the difference.

Learn more about Backup and Restore performance

3. Built for bulk recovery after ransomware and malicious attacks

This isn’t just backup — it’s a key part of your ransomware recovery plan.

When a large-scale attack hits, you need tooling that can orchestrate recovery at the speed of the incident. Microsoft 365 Backup is purpose-built for these large-scale recovery scenarios where you need to restore hundreds or even thousands of sites or mailboxes at one time.

• Bulk restore lets you roll back affected content across your organization to a healthy pre-attack state.

• You can restore to the original location (replacing compromised data) or to a new location for investigation.

• Backups are stored on append-only storage. Any changes to the content are snapped to new backups; the system does not modify any of the existing backups. Just as importantly, there are protections and recovery options for accidental or malicious policy modifications or offboarding requests.

4. Choose what fits your scenario: fast or granular restore points

You can go back to a relevant point in time.

Daily fast restore points are optimized for the fastest possible recovery. These are the recommended options for most restore scenarios, delivering the quickest path back to a healthy state.

If you need to recover from a more specific point in time, restore points are available as frequently as every 10 minutes. We recommend using daily fast restore points for most scenarios and reserving granular restore points for situations where pinpointing the moment of recovery is critical.

You can perform a full site, account, or mailbox rollback to a prior point in time, or use granular file-and-folder or mail-item restore to browse and recover individual items without touching everything else.

Learn more about restoring data

5. Configure backup at scale with dynamic rules and CSV uploads

You don’t have to add sites and mailboxes one by one.

Microsoft 365 Backup gives you powerful tools to configure protection across your entire organization quickly.

• Dynamic rules – Select Distribution Lists or Security Groups to define your backup scope for OneDrive and Exchange. Membership changes are automatically re-evaluated daily, so your backup policy stays current as people join and leave teams.

• Full-workload policies (Coming soon) – Turn on automatic backup for all Exchange Online users, all OneDrive accounts, and/or all SharePoint sites in your tenant with a single toggle.

• CSV upload – Bulk-add up to 50,000 mailboxes, sites, or accounts per CSV file for precise, large-scale configuration.

Whether you’re protecting 50 users or 50,000, setup scales to match. If needed, you can also select individual artifacts from a list and back them up.

Just as importantly, you can backup your entire tenant in a matter of hours or days. No need to wait weeks, months, or longer to export copies outside of the Microsoft 365 environment.

Learn more about Backup performance

Learn more about creating and managing backup policies

6. Pay only for what you protect

No additional licenses. No upfront costs. No commitments.

Microsoft 365 Backup uses a simple pay-as-you-go model at $0.15 per GB per month of protected content, billed through your Azure subscription.

• Billing is based on the total size of content under backup protection. This includes the storage used by protected SharePoint sites, OneDrive accounts, and Exchange mailboxes as shown in their usage reports, plus second-stage recycle bin content and Exchange archive mailboxes.

Learn more about pricing

7. If you ever turn it off, there’s a 90-day safety net

Disabling backup doesn’t mean your data vanishes overnight.

If Microsoft 365 Backup is turned off (whether intentionally, accidentally, or due to a billing issue), a fixed 90-day recovery grace period begins.

During those 90 days:

• Existing backups remain fully restorable.

• Offboarding can be cancelled at any point during the grace period.

• Multi-admin notifications are triggered automatically, alerting other administrators.

• Any and all mailboxes, SharePoint sites, and/or OneDrive accounts will not be hard delete-able in the primary service. As an extra line of defense, those mailboxes, sites, and OneDrive accounts are held in a soft deleted state as long as they are backed up.

• The offboarding action is recorded in the Microsoft 365 Audit logs.

You can also offboard at the individual protection unit level — removing specific sites, mailboxes, or OneDrive accounts from backup without turning off the entire service.

Important:

Offboarding faster than 30 days is not supported under any circumstance. This is an intentional safeguard to protect the tenant and help ensure that backup data cannot be rapidly purged, even by a compromised or malicious administrator.

For mailboxes, you must first completely offboard the mailboxes from Backup before you disable or remove the primary/archive mailboxes, or move the mailbox on-prem/cross-tenant.

Learn more about offboarding

8. Stay informed about the roadmap and feature updates

Microsoft 365 Backup is actively evolving, and you can follow along.

Here’s where to stay current on what’s coming and what just shipped:

• Microsoft 365 Roadmap – Filter by “Microsoft 365 Backup” to see upcoming features, timelines, and rollout status.

• Microsoft 365 Backup Adoption Hub – Find getting-started resources, partner solutions, and community stories.

Recent highlights include the following:

• Granular file-and-folder browse and restore (now GA)

• Departmental billing for multi-subscription environments

• Government Community Cloud (GCC) availability

9. You’re not on your own; support channels are ready

If you hit a snag, help is easy to find.

Microsoft 365 Backup is supported through the same channels you already use:

• In-product support – Open a support ticket directly from Help & Support in the Microsoft 365 admin center, as per your purchased plan.

• Documentation – Explore the full Microsoft 365 Backup docs on Microsoft Learn, which cover setup, policies, restore procedures, and troubleshooting.

• Troubleshooting – Find guided walkthroughs for common issues in the Microsoft 365 Admin troubleshooting library.

10. What you need to get started

Getting started is easy.

There are two prerequisites:

1. An admin role with the right permissions

Any of the following roles can set up and manage Microsoft 365 Backup:

• Global Administrator


• SharePoint Administrator


• Exchange Administrator


• Microsoft 365 Backup Admin (dedicated role with least-privilege access)

2. A pay-as-you-go billing policy

Microsoft 365 Backup requires a pay-as-you-go billing policy, which connects the service to an Azure subscription. Creating this billing policy requires the Owner or Contributor role on the Azure subscription. If the organization doesn’t have an Azure subscription yet, one can be created during the setup process.

No agents to install, no infrastructure to provision, no additional software to deploy.

Learn more about setup

Quick reference

*1,000+ protection unit restore speeds published here are based on internal benchmarking where SharePoint sites have an average of 12GB of stored content per site, Exchange Online mailboxes have an average of 26K items and an aggregate size of 10 GB. Those bulk recoveries use the in-place restore option, which is typical for large scale attack recovery scenarios. Actual times will depend on the number and size of the items in each site/mailbox.