Patent ID: 7797281

Claim:
A computer system, comprising: a processor subsystem; and a memory subsystem storing program instructions executable by the processor subsystem to: copy a plurality of data objects from a database of a directory service to a backup medium; and for at least a first of said plurality of copied data objects: query the database to determine a first private object identifier (POI) associated with the first data object, wherein the first POI is providable via a first interface of the directory service as part of a request to perform a granular restoration of the first data object, wherein the directory service is configured to authenticate the request based at least in part on the request including the first POI, and wherein the directory service is configured to refuse to authenticate the request based on the request not including the first POI; and store the first POI as metadata associated with the first data object, wherein the first POI is stored as metadata in a location other than the database of the directory service; wherein the computer system is not configured to generate the first POI from the copy of the first data object stored on the backup medium.