To support automatic protection and backup for new Microsoft resources (Users, Shared mailboxes, Sharepoint sites, Groups or Teams) Afi provides granular auto-protection settings that can be configured per resource kind (User, Sharepoint site, etc) or per AAD (Azure Active Directory) Group.
Automatic protection settings are managed at Service -> Protection -> AAD Groups tab. To enable automatic protection, Afi account administrator should select AAD Group(s) for which automatic protection should be enabled, click on Assign SLA button, make sure that Automatically protect new resources checkbox is set and select a backup SLA policy that will be automatically applied by Afi to resources newly added in the selected group(s). Please note, that as a result the system will also update SLA settings for resources already present in the given group(s).
If automatic protected is enabled, the system will assign a configured SLA policy to any resource added to a group regardless of the fact if the resource has been just created in the corresponding Microsoft 365 domain or if it has been transferred from another group with different SLA policy (in such case SLA policy assigned to the resource will be updated accordingly). It should be mentioned that as a protection from possible configuration mistakes, resource will keep its SLA policy when moved to a group without auto-protection settings.
With granular auto-protection settings that Afi provides, Afi domain administrator can assign different SLA policies for different groups based on the organisation requirements. For example, as retention settings are linked with backup SLA policies, it is possible to keep different retention settings for different groups of users and update settings (together with SLA policies) on users automatically if they are moved across the AAD groups with different settings.
Resource synchronisation between Afi and Microsoft 365
Afi performs resources synchronisation with Microsoft 365 domain once per 24 hours so a User or another resource created on Microsoft side should appear in Afi system in up to 24 hours since its creation. Once Afi has synchronised new resources in the system, it will assign a backup SLA to these resources based on their AAD groups and will backup them according to a schedule configured for the assigned backup SLA.
To trigger and out-of-schedule resources synchronisation between Afi and Microsoft, please click on the wheel icon in the top-right corner of Service -> Protection screen. Once the synchronisation is finished, Afi UI will be refreshed automatically and a new resource(s) will appear on Protection screen.