Start by enabling the Active Directory Recycle Bin - this might help you eliminate or at least minimize the need to use backups.
For instructions, refer to https://zcusa.951200.xyz/en-us/windows-server/identity/ad-ds/get-started/adac/active-directory-recycle-bin?tabs=adac
For backups, refer to https://zcusa.951200.xyz/en-us/azure/backup/active-directory-backup-restore
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
hth
Marcin