canonical: https://jentic.com/apis/azure.com/backup-management-client

# Microsoft Azure BackupManagementClient

Jentic publishes the only available OpenAPI specification for BackupManagementClient, keeping it validated and agent-ready. The Admin Backup Management Client exposes operations metadata for the Microsoft.Backup.Admin resource provider on Azure Stack Hub. It allows operators to enumerate the available admin-side backup operations against an Azure Stack stamp through its admin management endpoint.

## For AI agents

Discover the available admin backup operations on an Azure Stack Hub via the Microsoft.Backup.Admin resource provider.

## Scope

Does not trigger backups, schedule jobs, or restore data - use only to enumerate admin backup operations on the Microsoft.Backup.Admin provider.

## Capabilities

- Enumerate every available admin backup operation under the Microsoft.Backup.Admin resource provider
- Discover operation IDs that downstream Azure Stack admin tooling can call
- Query the resource provider against the local Azure Stack admin management endpoint
- Return operation display names and descriptions for catalogue or documentation generation

## Use cases

### Discover admin backup operations on a stamp

Stamp operators call the operations endpoint to enumerate the admin-side backup operations available on Microsoft.Backup.Admin. The response feeds into operator dashboards or CMDB inventories so administrators know exactly which control-plane actions exist before invoking any of them.

Example prompt: Call GET /providers/Microsoft.Backup.Admin/operations and return the list of operation names plus display strings

### Build a catalogue of stamp backup capabilities

Tooling that maintains an inventory of Azure Stack stamps polls this operations endpoint per stamp to build a capability matrix. It surfaces any drift between stamps and lets operators see at a glance which version of the Backup.Admin provider is deployed.

Example prompt: For each Azure Stack stamp in the inventory, call Operations_List and store the operation set keyed by stamp ID

### AI agent integration via Jentic

An Azure Stack operator agent uses Jentic to discover backup admin capabilities without learning the admin URL convention. The agent searches Jentic for 'list Azure Stack admin backup operations', loads the schema, and executes the call. Jentic handles AAD auth against the admin management endpoint so the agent never has to manage admin tokens directly.

Example prompt: Use Jentic search 'list Azure Stack admin backup operations' and execute Operations_List against the stamp

## Key endpoints

| Method | Path | Description |
| --- | --- | --- |
| GET | /providers/Microsoft.Backup.Admin/operations | List all admin backup operations available on the stamp |

## Key resources

- **Operations** — Provider-level operations endpoint listing all admin backup operations exposed by Microsoft.Backup.Admin.

## Why Jentic

- **Setup:** Wiring the BackupManagementClient by hand means configuring Azure AD OAuth2 and pointing it at the Azure Stack admin host adminmanagement.local.azurestack.external rather than public Azure, then constructing the Microsoft.Backup.Admin operations path yourself. Through Jentic you install once, import the BackupManagementClient from the API Directory, store the Azure AD credential once, and your agent calls it.
- **Permission scoping:** This API exposes a single read operation, GET /providers/Microsoft.Backup.Admin/operations, that enumerates the available admin backup operations, so limit the agent to that operation. It does not trigger backups or restores, so no write or destructive action is reachable unless you add such operations.
- **Credential handling:** Your Azure AD credential is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.
- **Discovery method:** Agents search Jentic by intent such as 'list Azure Stack admin backup operations', and Jentic returns the Operations_List operation with its input schema so the agent calls the right admin endpoint without browsing the Microsoft.Backup.Admin reference.

## Related APIs

- **Azure Recovery Services Backup** — Public Azure recovery and backup management rather than Azure Stack admin operations.
- **Azure Storage Management** — Manages storage accounts that backups commonly land in.
- **Azure Deployment Manager** — Coordinates rollouts that may include backup configuration changes.

## FAQ

### Why is there no official OpenAPI spec for BackupManagementClient?

Microsoft Azure does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call BackupManagementClient via structured tooling. It is validated against the live API and kept up to date. Get started with Jentic One, the self-hosted execution layer.

### What authentication does the BackupManagementClient API use?

The API uses Azure Active Directory OAuth 2.0 declared as azure_auth with the implicit flow. Calls go to the Azure Stack admin management endpoint (adminmanagement.local.azurestack.external) and tokens are presented as Bearer headers. Through Jentic, AAD client secrets are vault-stored and only short-lived scoped tokens reach the agent.

### Can I trigger a backup with this API?

No. This admin client only exposes the operations endpoint that lists what Microsoft.Backup.Admin can do. Triggering, scheduling, or restoring backups is handled by other operations under the same resource provider that are not part of this spec.

### What are the rate limits for the BackupManagementClient API?

Azure Stack admin endpoints apply ARM-style subscription throttling, typically 12,000 reads per hour, surfaced via x-ms-ratelimit-remaining headers. The admin Backup endpoint does not document additional limits beyond ARM.

### How do I list admin backup operations through Jentic?

Run pip install jentic, then use the async client to search 'list Azure Stack admin backup operations', load the Operations_List operation, and execute. Jentic returns the array of operation names that the stamp's Backup.Admin provider exposes.

### Does this API target public Azure or Azure Stack only?

It targets the Azure Stack admin management endpoint at adminmanagement.local.azurestack.external. Public Azure backup management is exposed through a different resource provider and base URL.

### Can I limit what my agent is allowed to do with the Azure Stack Backup Admin API?

Yes. Because you run Jentic One yourself, your own rules decide which operations and credentials the agent may use, so you can allow it only the single read call this API exposes, GET /providers/Microsoft.Backup.Admin/operations, which lists the available admin backup operations. That endpoint does not trigger, schedule, or restore backups, so no write or destructive action is reachable through this spec. Your Azure AD credential stays with your own instance and is injected only at execution time, never entering the agent's prompt or logs.