📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Rollbacks

Plan, approve and track the reversal of Microsoft 365 configuration changes.

Where to find it
Opened from Microsoft 365 › Configuration Changes
Who can use it
Anyone who can see the page; approving and aborting rollbacks needs an administrator role
Plan
Microsoft 365 backup and rollback add-on
For
Everyone

What the page is for

When a configuration change in Microsoft 365 is a mistake or the work of an attacker, you need to put things back the way they were. Lavawall keeps snapshots of your tenant's configuration, so it can work out the steps needed to return settings to an earlier state.

A rollback starts as a plan. You choose what to revert: one change, one object back to a point in time, everything a particular user changed during a period, or the whole tenant back to a point in time. Lavawall builds a list of actions, you review and approve it, and only then are changes made to your tenant. You can also run a dry run, which builds the plan without changing anything.

This page lists all rollbacks and their status, and opens each one to show its individual actions and results.

What you see

The Rollbacks page, with the all rollbacks, rollbacks table, rollback detail and new rollback numbered 1 to 4.
The Rollbacks page. Numbers match the list below.
  1. All Rollbacks header with New Rollback.
  2. Rollbacks table: ID, Company (all-companies view only), Type (with a dry run badge where applicable), Status, Created, Requested by, Approved by and Actions.
  3. Rollback detail: the rollback's type and status, Approve and Abort buttons, and a table of actions with Tier, Object Type, Object, Action, Status and Result.
  4. New Rollback window: Rollback type, the fields for that type, Target time (UTC), Justification, Dry run and Continue on error.

How to create a rollback plan

  1. Click New Rollback. (To reverse a single change, you can instead use Plan Rollback of This Change on the Configuration Changes page.)
  2. MSPs viewing all companies: choose the Target company.
  3. Choose a Rollback type:
    • Revert one object to a point in time: enter the Object type and Object ID.
    • Revert all changes by a user: enter the User UPN and the From (UTC) and To (UTC) times.
    • Revert ENTIRE tenant to a point in time.
  4. For point-in-time types, set Target time (UTC). Settings return to how they were at or before this time.
  5. Enter a Justification. It is recorded for audit.
  6. Tick Dry run to build the plan without changing anything, and leave Continue on error ticked so one failed action doesn't stop the rest.
  7. Click Create Plan.

How to approve or abort a rollback

  1. Click a rollback in the list to open it.
  2. Review every action in the actions table before approving.
  3. Click Approve when the status is planned, and confirm. Changes are made to your tenant when the rollback runs, not at approval.
  4. To cancel, click Abort while the rollback is planning, planned or approved. A rollback that has started running cannot be aborted.

How to check the result

  1. Open the rollback.
  2. Check its status: completed, partial, failed or dry_run_complete.
  3. Check each action's Status and Result. Actions can be succeeded, failed, skipped, requires_manual (you must make this change yourself) or skipped_no_permission.

Tips

  • Start with a dry run for anything larger than a single change, especially a whole-tenant rollback.
  • Status colours: blue for planned, orange for executing, green for completed, amber for partial, red for failed, and struck through for aborted.
  • skipped_no_permission usually means Lavawall has read-only access. Re-authorize Microsoft 365 with Read + Write access to allow rollbacks.
  • Use Back to all rollbacks to return to the list.

Troubleshooting

  • "Rollback execution is not enabled for this company." The rollback add-on is not active. Enable it from the billing link in the message.
  • "No rollbacks." Click New Rollback, or use Plan Rollback of This Change on a specific change.
  • "No actions yet." The plan is still being built. Check back shortly.
  • "Pick a target company first." In the all-companies view, choose a Target company in the New Rollback window.

Still need help?

Search the support centre, or contact our support team and tell us which page you were on.

Names, companies, devices and figures in the pictures are examples. Other product and company names are trademarks of their respective owners.

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.