Microsoft Entra has added a preview feature called Hard Deletion Protection that gives administrators seven days to restore supported directory objects before permanent erasure. It does not prevent the original deletion, requires the Backup Administrator role to configure, and covers cloud-only users, groups, applications and service principals.