# Backup & Restore

ExtensionsAssignments Manager

## Backup & Restore

How to backup policy assignments before migration and restore them if needed using the Assignment Manager.

## [Backup & Restore Assignments](#backup--restore-assignments)

Before making any assignment changes, Assignment Manager provides a built-in backup system to ensure you can always restore to the previous state if needed.

{% hint style="info" %}
Safety first approach

The backup feature creates a complete snapshot of your current assignment state before any migration begins.
{% endhint %}

***

### [Creating Backups](#creating-backups)

{% stepper %}
{% step %}

### Start the Backup Process

Before any migration, click the **"Backup Ready Policies"** button in the Assignment Manager interface.

This backs up ALL policies in your tenant

The backup process will:

* Export all policy assignments
* Include assignment filters and targeting
* Package everything into a downloadable ZIP file
  {% endstep %}

{% step %}

### Download & Store the Backup

Once the backup completes, download the ZIP file to a secure location.

**Recommended naming convention:**

```
policy-backups_tenantID_-YYYY-MM-DD-HHMMSS.zip
Example: intune-backup-2024-01-15-143022.zip
```

{% hint style="warning" %}
Important

Store backups in a version-controlled location or secure file share. You may need them weeks or months later.
{% endhint %}
{% endstep %}
{% endstepper %}

***

### [Understanding Backup Contents](#understanding-backup-contents)

The backup ZIP contains JSON files for each policy with complete assignment information. After extracting the ZIP, you'll see a folder structure like this:

![Backup ZIP Structure](/files/ecda9508f1bf654027b58199c04356256c5ca9e6)

Each JSON file contains:

* Policy metadata and settings
* All current group assignments
* Applied filters (include/exclude)
* Assignment targeting details

***

### [Restoring Assignments](#restoring-assignments)

{% stepper %}
{% step %}

### Identify the Policy to Restore

Extract the backup ZIP file and locate the specific policy you need to restore.

**Navigate through the folder structure:**

* `compliance-policies/` - Compliance policies
* `configuration-profiles/` - Device configuration profiles
* `app-protection/` - App protection policies
  {% endstep %}

{% step %}

### Access the Microsoft Intune Portal

Currently, restoration must be done through the Microsoft Intune admin center:

1. Open [Microsoft Intune admin center](https://endpoint.microsoft.com/)
2. Navigate to the appropriate policy section
3. Locate the policy you want to restore assignments for

Why manual restoration?

Direct restoration through Assignment Manager is planned for future releases. Manual import ensures you have full control over what gets restored.

The exported policies are raw JSON data directly from Intune, making it easy to re-import. Be aware that when uploading the JSON file to the Intune Portal will create a new policy with a new policy ID. That means you have to remove the old policy after the new one is created.

{% hint style="info" %}
Coming soon

We are currently working on a direct restore functionality to avoid this extra step in the future.
{% endhint %}
{% endstep %}
{% endstepper %}

***

### [Best Practices](#best-practices)

#### [Backup Strategy](#-backup-strategy)

**Before every migration:**

* Always create a fresh backup using the backup button
* Store in a secure, accessible location

#### [Recovery Planning](#-recovery-planning)

**Document your restore process:**

1. Which policies were changed
2. What the previous state looked like
3. Who can perform emergency restores
4. How to validate successful restoration

**Test your backups:**

* Periodically validate backup file integrity
* Practice restoration procedures in test environments
* Ensure team members know the restoration process

***

### [Troubleshooting](#troubleshooting)

#### [Backup Issues](#backup-issues)

**Backup takes too long:**

* Large tenants may require 10+ minutes
* Don't close the browser during backup
* Consider backing up policy types separately

**Backup file is empty or corrupt:**

* Check browser download settings
* Verify sufficient permissions in Intune. Check the [permissions documentation](broken://pages/4ec5831c39215df186b8fa9c2ed2c53b73c620e0).
* Try again during low-usage periods

#### [Restoration Issues](#restoration-issues)

**Can't find the right policy in backup:**

* Search by display name in the JSON files
* Check policy type folders carefully
* Use the policy GUID if display names changed

**Assignments don't match after restore:**

* Verify group names haven't changed
* Check if filters still exist with same names
* Confirm you have the right backup version

***

### [Future Enhancements](#future-enhancements)

Coming soon

* **Direct restore functionality** - Import backup files directly through Assignment Manager without manual portal work.
* **Selective restore** - Choose specific assignments to restore rather than full policy restoration.
* **Automated validation** - Automatic comparison between backup and current state.

***

### [Related Documentation](#related-documentation)

* [Assignment Migration Overview](/extensions/assignments-manager.md)
* [How Assignment Manager Works](/extensions/assignments-manager/intune-assignments/workflow.md)
* [CSV Format Reference](broken://pages/5b8e7f2b62f45e320eeecfec69208bdbd637881c)

[Scenarios\ \ Bulk manage Microsoft Intune policy assignments using CSV files (add, remove, replace) across tenants.](/extensions/assignments-manager/intune-assignments/supported-scenarios.md) [Multi-Tenant Overview\ \ How Intune Assistant supports MSPs with GDAP-enabled multi-tenant management](/extensions/msp-support/overview.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.intuneassistant.cloud/extensions/assignments-manager/intune-assignments/backup-and-restore.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
