Configure (Undefined variable: Catalog/data-source-names.microsoft-entra-id-short) permissions

Before setting up the Microsoft Entra ID data source for Data Access, configure the underlying data source with the required permissions to allow Data Access to synchronize users and groups.

Steps

To configure Microsoft Entra ID permissions for Data Access:

  1. In the Microsoft Entra admin center, click Entra ID > App registrations > New registration.
  2. Register Data Access, and then record the client ID and tenant ID for later use.
  3. Go to Overview > Client credentials > Add a certificate or secret.
  4. Create a new secret, and then record the secret value for later use.
  5. Click API permissions > Add a permission > Microsoft Graph > Application permissions.
  6. Add the following permissions, and then grant admin consent to each.
    PermissionPurpose
    Group.Read.All

    To read all groups in the Microsoft Entra ID tenant.

    GroupMember.Read.All

    To read all members of each group (including nested groups) to synchronize access controls.

    User.Read

    To allow Data Access to sign in and read the profile of the signed-in user.

    User.Read.All

    To read all users in the Microsoft Entra ID tenant.

What's next

Create Azure connection