Added the isHardDeleteProtectionEnabled property to the user (excluding on-premises synchronized users), group , application , and servicePrincipal resources. Enable hard deletion protection on existing objects to block permanent deletion for seven days after soft deletion. Once enabled, protection can't be disabled.