Leveraging Intelligent Recommendations for Operational Transformation. AMS Partners click HERE | EMEA/APJ Partners click HERE |
11/01/2023 08:57 PM
Hello everyone,
I am able to import group from Azure AD using Azure AD Connector. but it's not importing roles. what operations I need to perform for importing Azure AD Roles.
11/01/2023 09:00 PM
Does service account have required access
11/01/2023 09:13 PM
What is Required access need to perform role import ?
11/01/2023 09:18 PM
You mean AppRole entitlement type correct ?
11/01/2023 09:20 PM
11/01/2023 10:22 PM
I Want to import following Roles
11/01/2023 09:55 PM
@Smiling are you using any ENTITLEMENT_ATTRIBUTE filter?
11/01/2023 10:27 PM
@Manu269 Yes. Following Query I am using in ENTITLEMENT_ATTRIBUTE.
{
"entitlementAttribute": {
"AADGroup": {
"colsToPropsMap": {
"entitlementID": "id~#~char",
"entitlement_value": "displayName~#~char",
"description": "description~#~char",
"customproperty1": "deletedDateTime~#~char",
"customproperty2": "description~#~char",
"customproperty3": "membershipRule~#~char",
"customproperty5": "onPremisesSyncEnabled~#~char",
"customproperty6": "onPremisesLastSyncDateTime~#~char",
"customproperty7": "mail~#~char",
"customproperty8": "mailEnabled~#~char",
"customproperty9": "onPremisesSecurityIdentifier~#~char",
"customproperty10": "securityEnabled~#~char",
"customproperty11": "groupTypes~#~listAsString",
"customproperty13": "membershipRuleProcessingState~#~char",
"customproperty16": "resourceProvisioningOptions~#~char",
"customproperty17": "onPremisesSyncEnabled~#~char",
"customproperty18": "createdDateTime~#~char",
"customproperty19": "id~#~char"
}
}
}
}
11/01/2023 11:01 PM
When you say role are you talking about
DirectoryRole
AppRole
ApplicationInstanceAppRole
If yes then you need to include these mappings also.