Restoring a Tenant IAM DB

An IAM database restore can be requested from Airlock Support. Database restores are supported for snapshots up to 30 days old.

Point-in-time restores are available with the following service objectives:

• Recovery point objective (maximum data loss): 4h

• Recovery time objective (target restore time): 4h

Consequences of an IAM database restore

An IAM database restore reverts the database to an earlier point in time. As a result, data and changes made after the selected restore point are lost.

Specifically, a restore:

• may revert credentials that were changed after the selected restore point, including credentials updated as part of a security response,

• may restore accounts to an unlocked state,

• may cause incompatibilities with external systems,

• may cause incompatibilities with the currently active IAM configuration.

An IAM database restore affects only the database. It does not:

• restore secrets or key pairs managed through the Airlock Console,

• restore IAM configurations to the selected restore point.

An IAM database restore requires downtime. The affected tenant IAM is unavailable during the restore process.

Request a DB restore

1. Create a Support Ticket and and set the following field values:

   • Project: SaaS Support (SAASCASE)

   • Issue Type: Support Case

   • Summary: DB Restore Request

   • SaaS Severity: <severity>

2. In Description, paste the following template and replace the placeholders:

   DB Restore Request

   • Tenant id: <TenantID>

   • Restore Time (UTC): <time-utc>

   • Name: <requester-name>

   • Email: <requester-email>

   • Phone: <requester-phone>

3. Complete the authorization verification requested by Airlock Support.
   --> After verification, Airlock Support coordinates the restore with you.

4. After the restore has completed successfully, verify that the IAM starts up correctly and perform any required follow-up actions, such as:

   • Uploading a compatible configuration

   • Reconfiguring external systems