Created by Claude - please verify

Microsoft 365 Backup - protection policies and protection units compared with licensed users by department.

Required Microsoft Graph permissions

BackupRestore-Configuration.Read.All (some list calls document BackupRestore-Configuration.ReadWrite.All as least privileged) User.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft 365 Backup (pay-as-you-go through an Azure subscription).

Endpoints: GET /v1.0/solutions/backupRestore · GET /v1.0/solutions/backupRestore/protectionPolicies · GET .../mailboxProtectionUnits, driveProtectionUnits, siteProtectionUnits

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Microsoft 365 Backup Coverage

Microsoft 365 Backup restores mailboxes, OneDrives and sites to a point in time after ransomware or mass deletion - but only what a policy protects. This report shows the policies, coverage per department (sensitive departments first) and leavers you are still paying to protect.