Why are all my Seats archived?

This article details specific cases where Datto SaaS Protection archives all seats for a domain.

Environment

  • Datto SaaS Protection for M365

Description

Microsoft API errors can sometimes occur that will cause Datto SaaS Protection to be unable to access the Microsoft 365 tenant during during seat discovery. Datto can’t control these errors, and customers with invalid tenants who want their tenants to be active again must renew them in Microsoft 365.

Microsoft API Errors

The following tenant-level Microsoft API errors indicate that the tenant is no longer accessible - either it has been removed, deactivated, or is invalid for some reason.

Example errors from Microsoft:

  • AADSTS500014 - Tenant Resource Disabled

  • AADSTS500011 - Resource Principal Not Found

  • AADSTS90002 - Tenant Not Found

  • “Doesn’t Have a Valid License”

When the Microsoft API returns one of the above errors and Datto SaaS Protection attempts to access seat information or backup a tenant, Datto SaaS Protection is unable to access any other information. In this scenario, the seats/backups will be archived. No data will be removed (unless it’s past its retention policy period), but Datto SaaS Protection can't take further backups until it can access the Microsoft tenant again.

If the Microsoft tenant becomes accessible again, Datto SaaS Protection will discover this in the next RemoteSeatUpdate run and if the seats should be considered active and get backups, they will continue to do so.