Recovery for Azure AD

Cygna Auditor enables you to recover Azure AD objects such as deleted users as well as revert changes to various object attributes. With Recovery feature, you can manage your Azure AD and switch between its current state and previous snapshots.

To recover changes:

1. Navigate to Tools / Azure AD Recovery to see the Azure AD Recycle Bin.

   Alternatively, to recover Azure AD changes right from the Auditing search, select an entry, expand its properties and select Rollback.

2. Select the Microsoft Subscriptions tenant account from the list.
3. Review recent changes. By default, Cygna Auditor lists objects were placed in the Azure Recycle Bin within last 30 days. Click on the calendar icon to update these settings.
4. Select a entry you want to recover.
5. In the wizard, on the Recovery Target step, review information about the object you are about to recover.
6. On the Snapshot Selection step, pick a snapshot. Cygna Auditor will restore the object to the state it was at the moment of the snapshot creation. You can use the most recent snapshot or any snapshot of your choice.
7. If you selected a specific snapshot, proceed to the Attribute Selection step. On this step, you can review object attributes that has been updated and pick the attributes to roll back their changes. By default, Cygna Recovery roll back all attributes to a selected snapshot state but you can fine-tune this process and pick the attributes manually.
8. Review the Summary page and click Recover. You've got an option to recover an object as a currently logged in user or impersonate as administrator. In this case, you'll be prompted to provide administrative credentials.