Importing Roles From Azure AD

[Smiling]

Hello everyone,

I am able to import group from Azure AD using Azure AD Connector. but it's not importing roles. what operations I need to perform for importing Azure AD Roles.

[rushikeshvartak]

Does service account have required access

[Smiling]

What is Required access need to perform role import ?

[rushikeshvartak]

You mean AppRole entitlement type correct ?

[rushikeshvartak]

Refer https://docs.saviyntcloud.com/bundle/AzureConf-v23x/page/Content/Registering-an-Application-in-Azure... 

[Smiling]

I Want to import following Roles

[Manu269]

@Smiling are you using any ENTITLEMENT_ATTRIBUTE  filter?

[Smiling]

@Manu269 Yes. Following Query I am using in ENTITLEMENT_ATTRIBUTE.

{
"entitlementAttribute": {
"AADGroup": {
"colsToPropsMap": {
"entitlementID": "id~#~char",
"entitlement_value": "displayName~#~char",
"description": "description~#~char",
"customproperty1": "deletedDateTime~#~char",
"customproperty2": "description~#~char",
"customproperty3": "membershipRule~#~char",
"customproperty5": "onPremisesSyncEnabled~#~char",
"customproperty6": "onPremisesLastSyncDateTime~#~char",
"customproperty7": "mail~#~char",
"customproperty8": "mailEnabled~#~char",
"customproperty9": "onPremisesSecurityIdentifier~#~char",
"customproperty10": "securityEnabled~#~char",
"customproperty11": "groupTypes~#~listAsString",
"customproperty13": "membershipRuleProcessingState~#~char",
"customproperty16": "resourceProvisioningOptions~#~char",
"customproperty17": "onPremisesSyncEnabled~#~char",
"customproperty18": "createdDateTime~#~char",
"customproperty19": "id~#~char"
}
}
}
}

[Manu269]

When you say role are you talking about 

DirectoryRole

AppRole

ApplicationInstanceAppRole

 If yes then you need to include these mappings also.