SureTel
Resources · Managed IT
Microsoft 365 Management vs Backup
Management looks after access and configuration; backup lets you restore data. They are separate jobs.
In short
Management, backup and licences — the difference
Microsoft 365 management is the ongoing administration of your tenant: accounts, access, sign-in security and configuration. Microsoft 365 backup keeps separate copies of specified data — such as mailboxes, OneDrive and SharePoint — so it can be restored under the purchased scope. Microsoft licences are a third, separate cost. One does not do the job of the others, so each should be defined on its own.
- Management administers access and configuration within the licences you hold.
- Backup protects specified workloads and accounts for restores under the purchased scope.
- Licences are bought separately and determine which features are available.
- Backup is not disaster recovery, and there is no universal recovery time.
Three things
Three separate parts of Microsoft 365
Businesses often assume one of these covers the others. Each answers a different question.
Management
Who can sign in and what they can reach: creating and closing accounts, permissions, sharing settings and the security features your licences include.
Backup
Whether specified data can be got back: separate copies of chosen mailboxes, OneDrive and SharePoint data, kept for an agreed period.
Licences
What Microsoft provides: the apps, storage and security features each user is entitled to. Licence level limits what management can switch on.
Backup scope
Pin down exactly what backup covers
Avoid assuming everything is covered. Define each of these for your tenant.
- Workloads
- Which services are included — for example Exchange mailboxes, OneDrive, SharePoint and Teams data — and which are not.
- Accounts
- Which user, shared and former-staff accounts are protected, and how new accounts are added.
- Retention
- How long backup copies are kept, and what happens to data for people who have left.
- Exclusions
- Data or services that are not backed up, written down so nobody relies on them by mistake.
- Authorised restores
- Who in the business may request a restore and how requests are verified.
- Testing
- How often restores are tested and what is tested, according to the backup service purchased.
Examples
Which one handles it?
Everyday situations show where management ends and backup begins.
| Situation | Management | Backup |
|---|---|---|
| A new staff member joins | Creates the account, assigns the licence, sets access and sign-in security. | Adds the new account to the backup scope where agreed. |
| Someone deletes an important folder | May help recover it from Microsoft's own retention, if still available. | Restores the folder from a backup copy, under the purchased scope. |
| A staff member leaves | Blocks sign-in, transfers mail and files, and removes access as authorised. | Keeps their data for the agreed retention period. |
| A mailbox is compromised | Secures the account and reviews sign-in and mail rules. | Restores affected mail where needed. |
| Files are encrypted by ransomware | Part of a broader incident response, which is scoped separately. | Provides restore points, subject to what was backed up and when. |
A compromise or ransomware incident needs a broader response than routine management or a single restore. Incident response is scoped separately.
Ask
Questions to ask about Microsoft 365 cover
- Which licences do our users have, and which security features do they include?
- Who holds the global admin accounts?
- Which workloads and accounts are backed up today?
- How long are backup copies kept?
- Who is allowed to request a restore?
- How often are restores tested, and how are results reported?
- What happens to a leaver's data, and for how long?
- Which business data matters most if several restores are needed at once?
SureTel
How SureTel offers these
Both are optional modules on top of the Managed IT base, so you choose the scope you need.
Microsoft 365 management
Basic, Advanced or Complete levels, normally covering all active staff accounts in the tenant, with special accounts defined. Security features need the right licence entitlement.
Managed backup
A separately purchased module. What is backed up, how long it is kept and how often restores are tested depend on the schedule chosen.
Licences and projects
Microsoft licences are billed separately. Initial deployments and major migrations are quoted as projects.
Priorities
When several restores are needed, the business decides which data comes first. Backup is not disaster recovery, and no universal recovery time applies.
Keep reading
Related guides and services
Microsoft 365 management
SureTel's tenant management module and its levels.
Managed backup
SureTel's separately purchased backup service.
Managed IT pricing
The base price and how modules are added.
How to compare managed IT quotes
Compare management, backup and licences as separate lines.
How to change IT providers
Keep tenant ownership and backup intact during a change.
Managed IT services
The base service these modules are added to.
FAQs
Frequently asked questions
Doesn't Microsoft already protect our data?
Microsoft runs the service and provides retention and recovery features, which depend on your licences and settings. Those features are not the same as a separate backup with its own retention and a defined restore process. Check what your licences and configuration actually provide before deciding.
Do we need both management and backup?
They do different jobs. Management keeps accounts, access and security settings in order; backup lets you restore specified data. Many businesses choose both, but each is a separate decision based on your risks.
Is Microsoft 365 management or backup included in SureTel's Managed IT base?
No. SureTel's Microsoft 365 management (Basic, Advanced or Complete) and Managed Backup are separately chosen modules. Microsoft licences are also billed separately.
How quickly can data be restored?
It depends on what is being restored, how much data is involved and the backup service purchased. There is no universal recovery time or recovery point that applies to every business; any targets should be agreed for your setup.
How often are restores tested?
Restore-testing scope and frequency depend on the backup schedule you purchase. Ask any provider what is tested, how often and how results are reported.
Who can ask for a restore?
Only people the business has authorised. A clear list of who may request restores, especially of another person's mailbox or files, protects both the business and its staff.
Is backup the same as disaster recovery?
No. Backup restores specified data. Disaster recovery is a wider plan for bringing systems and operations back after a major incident, and it is scoped separately.
Find out what your Microsoft 365 setup needs
Request a free, qualified IT Health & Risk Assessment: normally 2–4 hours, remote-first, ending in a readout of findings and priorities. SureTel reviews your request and contacts you to arrange a time. It is not free remediation, penetration testing or unrestricted scanning.