diff --git a/src/internal/m365/backup.go b/src/internal/m365/backup.go
index 50514e4ad..a4e20c61e 100644
--- a/src/internal/m365/backup.go
+++ b/src/internal/m365/backup.go
@@ -61,7 +61,7 @@ func (ctrl *Controller) ProduceBackupCollections(
 	serviceEnabled, canMakeDeltaQueries, err := checkServiceEnabled(
 		ctx,
 		ctrl.AC.Users(),
-		path.ServiceType(sels.Service),
+		sels.PathService(),
 		sels.DiscreteOwner)
 	if err != nil {
 		return nil, nil, false, err
diff --git a/src/internal/m365/restore.go b/src/internal/m365/restore.go
index f195d28f3..b69aa853f 100644
--- a/src/internal/m365/restore.go
+++ b/src/internal/m365/restore.go
@@ -39,11 +39,23 @@ func (ctrl *Controller) ConsumeRestoreCollections(
 		return nil, clues.New("no collections to restore")
 	}
 
+	serviceEnabled, _, err := checkServiceEnabled(
+		ctx,
+		ctrl.AC.Users(),
+		rcc.Selector.PathService(),
+		rcc.ProtectedResource.ID())
+	if err != nil {
+		return nil, err
+	}
+
+	if !serviceEnabled {
+		return nil, clues.Stack(graph.ErrServiceNotEnabled).WithClues(ctx)
+	}
+
 	var (
 		service = rcc.Selector.PathService()
 		status  *support.ControllerOperationStatus
 		deets   = &details.Builder{}
-		err     error
 	)
 
 	switch service {