This article applies exclusively to Configuration Manager SaaS. Find below the configurations managed with Application authentication (via a service principal identity) Delegated authentication (via a service account identity) Configurations managed with application authentication Backup Users and Groups Only users and groups that are explicitly referenced by other supported configurations are backed up. Defender > Settings > Email & Collaboration > Priority Account Protection Entra ID > Administrative Units Entra ID > Administrative Units > Members Entra ID > App Registrations Entra ID > App