What this query does
This Azure Resource Graph health query compares virtual machine inventory with Recovery Services backup items and returns VMs for which backup coverage cannot be found. It turns a cross-resource relationship into an actionable exception list for platform, resilience, and operations teams.
What This Query Detects
- Virtual machines with no matching Recovery Services backup item.
- Active workloads whose current inventory has no visible backup coverage.
- Subscription and resource-group clusters where backup onboarding may be incomplete.
Why It Matters
A VM without backup coverage creates a direct recovery gap. Accidental deletion, ransomware, failed change activity, or an infrastructure incident can have a materially larger blast radius when the workload has no recoverable backup point.
Example Output Fields
Field availability reflects the health query contract and the resource properties available to Azure Resource Graph.
| Field | How to use it |
|---|---|
subscriptionId | Azure subscription that owns the virtual machine. |
resourceGroup | Resource group containing the virtual machine. |
vmName | Virtual machine name. |
location | Azure region in which the VM is deployed. |
vmSize | Configured Azure VM size. |
osType | Operating system family reported for the VM. |
powerState | Current or most recently reported VM power state. |
How To Read The Results
Treat a running production VM without backup coverage as a stronger priority than a stopped, deallocated, disposable, or explicitly ephemeral workload. Confirm whether an alternative protection mechanism exists before closing the finding, because absence from Recovery Services does not by itself prove that no application-level recovery strategy exists.
What You Gain On A Dashboard
Dashboard outcomes
- A fast inventory of unprotected virtual machines.
- A focused list of workloads with a disaster recovery gap.
- A practical queue for backup onboarding and exception review.
Best for dashboards focused on
- Resilience posture
- Backup coverage
- Disaster recovery readiness
- Platform operations
Find the workloads your recovery plan may be missing
Connect your Azure environment to VYRE Cloud and turn backup coverage gaps into a focused view of protection priorities across your estate.
Your environment. Your priorities. One dashboard built around the signals that matter.
- Unprotected workloads
- Recovery coverage gaps
- Backup priorities
Recommended Use Cases
- Weekly backup coverage review across subscriptions.
- Pre-audit evidence gathering for resilience controls.
- Prioritizing Recovery Services onboarding by workload state and business criticality.
- Validating newly provisioned VMs against the platform backup baseline.