📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Lavawall®: The Alternative to Dropsuite Entra Backup (NinjaOne)

Lavawall® backs up Entra ID configuration, as Dropsuite Entra Backup does, and also covers Intune profiles, Microsoft 365 tenant settings, and Azure subscription resources in the same platform. Both let MSPs recover from policy drift, deletions, and accidental changes.

Dropsuite (now a NinjaOne company) launched Dropsuite Entra Backup specifically to address what its docs call “policy drift” in Microsoft Entra ID: Conditional Access policies modified, device configurations changed, and app service principals altered. Dropsuite’s pitch is essentially: Microsoft retains audit logs for 30 days, doesn’t expose a recycle bin for many Entra object types, and offers no native “undo”. That’s the gap Dropsuite Entra Backup fills, with unlimited retention, granular recovery, and configuration-change tracking. The product is an MSP-channel offering, sold per-user.

Lavawall® covers the same Entra ID surface (Conditional Access, named locations, authentication methods policy, role assignments, app registrations, service principals, group memberships, custom security attributes) and goes further by snapshotting Intune device-configuration and compliance profiles, the Microsoft 365 tenant organization settings, and Azure subscription resources (NSGs, Key Vault access policies, RBAC, and managed identities). It’s configuration backup for the whole Microsoft cloud.

The other real difference is packaging. Dropsuite Entra Backup is a dedicated SKU. Lavawall® is a multi-tenant RMM and remote support platform for MSPs and IT teams, with patching, security monitoring, Microsoft 365 and Google Workspace breach detection, and compliance built into the same agent and console. Configuration backup & rollback is one module of it. For an MSP that already runs the rest of the Lavawall® platform, configuration backup is included in the Complete tier.

Where Lavawall® wins

Scope beyond Entra. Dropsuite Entra Backup is focused on Entra ID; check Dropsuite’s documentation for coverage beyond identity. Lavawall® adds Intune (device-config profiles, compliance profiles, app protection policies), M365 tenant org settings, and Azure subscription scope (NSG rules, Key Vault access policies, RBAC role assignments, managed identities). For an MSP, that means one tool covers the whole Microsoft cloud surface area, identity included.

Bundled with breach detection and audit-log correlation. Each detected change is correlated with the M365 audit log to show the UPN, IP, and country of whoever made it. Lavawall® is both a config-recovery tool and part of the breach-detection layer.

Bundled with the rest of the platform. If you’re already on the Lavawall® Complete tier, you don’t add another vendor relationship for config backup. It’s included. If you’re on Professional, the add-on is C$3.95 / US$2.95 per user per month.

Plan → approve → execute rollback. Rollbacks are explicit, reviewable, and auditable. Dry-run mode shows every change it would make before it makes any of them. Designed for MSPs operating across many tenants who need clean audit trails on every recovery action.

Where Dropsuite Entra Backup wins

NinjaOne integration. If you’re an MSP standardized on NinjaOne RMM, Dropsuite is the natural identity-backup choice: same vendor, same procurement path, integrated billing.

Identity focus depth. Dropsuite Entra Backup is a dedicated identity backup product with deep retention semantics and Entra-specific recovery patterns refined for that scope.

Mailbox backup paired with identity backup. Dropsuite’s flagship is mailbox/SharePoint backup; Entra Backup is the identity counterpart. If you want one vendor for both content and identity backup, Dropsuite covers that.

Feature comparison

Feature Lavawall® Dropsuite Entra Backup
Conditional Access policiesYesYes
Named locations & authentication strengthsYesYes
Authentication methods policyYesYes
Role assignments / PIMYesYes
App registrations / service principalsYesYes
Group membershipsYesYes
Custom security attributesYesLimited
Intune device-config / compliance profilesYesNo
Intune app protection policiesYesNo
M365 tenant organization settingsYesLimited
Azure subscription RBAC role assignmentsYesNo
Azure Network Security Group rulesYesNo
Azure Key Vault access policiesYesNo
Plan → approve → execute rollback workflowYesOne-click recovery
Audit-log correlation in change feedYesYes
Severity rating per changeYes (info/low/medium/high/critical)Yes
Bundled with breach detection / identity threat detection and response (ITDR)YesNo
Bundled with patching / RMMYes, one platformNo
Bundled with GRC / framework evidenceYes, 70+ frameworksNo
Bundled with helpdesk & remote supportYesNo
Pricing modelPer-user MSP add-on or bundled in Complete tierPer-user MSP-channel

Who should pick which?

Pick Lavawall® if…

You want one tool for Entra plus Intune plus Azure subscription scope.

You want config backup bundled with breach detection, RMM, GRC, and helpdesk on one platform.

You're not standardized on NinjaOne, or you want Lavawall®'s breadth even if you are.

Pick Dropsuite Entra Backup if…

You're standardized on NinjaOne and want one-vendor procurement for the M365 stack.

Identity backup is a discrete budget line not tied to a broader platform decision.

You want Dropsuite's combined mailbox + identity backup story from a single vendor relationship.

Frequently asked

Is Dropsuite the same as Dropsuite Backup?
Not exactly. Dropsuite is now a NinjaOne company. Its main product line is mailbox/SharePoint backup, and Dropsuite Entra Backup is a separate product launched specifically for Entra ID configuration protection: Conditional Access policies, device configurations, and app service principals.
Does Lavawall® cover the same Entra objects as Dropsuite Entra Backup?
Yes: Conditional Access policies, named locations, authentication methods policy, role assignments, app registrations, service principals, group memberships, and custom security attributes. Lavawall® also covers Intune profiles and Azure subscription resources.
How is Lavawall® different from Dropsuite Entra Backup?
Lavawall® covers Entra plus Intune and Azure subscriptions, while Dropsuite Entra Backup is focused on Entra ID. Lavawall®'s change monitoring and rollback are part of the Lavawall® RMM, with patching, breach detection, GRC, and helpdesk.

NinjaOne is a trademark of NinjaOne, LLC. Lavawall is not affiliated with NinjaOne.