Users, Groups & Applications

Users, groups, and applications define who has access to what, how teams are organized, and how third-party services connect to your environment. Losing any of them — even temporarily — can bring critical business operations to a halt.

What Kasca backs up

Kasca captures a full snapshot of your users, groups, and application registrations, including their properties at the time of backup. This means not just the object itself, but the attributes, memberships, assignments, and configurations that make it useful.

For users, this includes profile information, account status, and assigned roles. For groups, membership and assigned permissions. For applications, registration details and configuration properties captured at backup time.

What happens when something goes wrong

Accidental deletions happen more often than most teams expect. A bulk operation targeting the wrong scope, a script with a missing filter, a junior admin with too much access — any of these can result in objects being removed that took significant time and effort to configure.

Microsoft provides a 30-day soft-delete window during which objects can be easily restored through the platform itself. The problem arises when that window has passed. Once an object is hard-deleted, native recovery is no longer possible.

This is where Kasca comes in. Using your backup data, Kasca can rehydrate hard-deleted objects back into your environment — something Microsoft cannot do on its own. Some manual interaction is required after restoration: passwords need to be set, secrets regenerated, and new certificates issued. However, the backup retains all available data from the original object — including descriptions, validity periods, and other configuration details — so you are not starting from scratch.

Restoring with Kasca

Restoration is granular — you can restore a single user, a specific group, or an individual application without touching anything else. For objects still within Microsoft's soft-delete window, Kasca uses the soft-deleted object.

For everything else, Kasca's rehydration gives you a path back that would otherwise not exist.