Microsoft Graph API Connection Configuration
...
Copy the "Value" of the newly created client secret.
| Note |
|---|
Important: Ensure you copy the Value, not the Secret ID. The Value is required for authentication and will be hidden once you leave the page. |
...
9- Select “Microsoft Graph” and add Directory.Read.All for the “Application” type.
| Info |
|---|
Pro Tip:If you want toTo grant the minimum permissions, then you can use the following:
If there are your environment has nested groups in your environment , where the a parent group, a group that possesses other groups as members, has sufficient permission that the application can access , but the a child group, a group that is a member of another group, doesn't, it causes failure in accessing both the child and the parent groups. You may get a permission error for the groups. Then please use the following permissions does not, you may encounter permission errors. In that case, use:
|
 |
...
Ask your Azure Admin
...
to provide consent for the required permission. The
...
settings should be as follows
...
:
Permission:
Directory.Read.AllType: Application
Admin
...
Consent Requested: Yes
Status: Granted for <your
...
organization>
An See the example screenshot is provided below:
 |
| Note |
|---|
Just wanted to highlight that this This step is important and crucial, as we frequently receive tickets from our customers regarding customer tickets related to permission errors. Most The most common mistake done by Azure Admins is defining the type as “Delegated” which is the default, instead of “Application”. |
...
make is selecting "Delegated" (the default) instead of "Application" as the permission type. |
Fill in the required fields under Azure Connection Settings in the
...
Source tab of Azure AD Importer for JSM Assets.
...
Then, click "Save & Check
...
Connection" to
...
confirm the configuration is successful.
...
| Note |
|---|
We previously had customers writing the Secret ID instead of the Secret Value. Please make sure you use the Application Secret Value. Otherwise, you may get an Error as below:  |
...
(Optional) You can apply filters for Users and Groups to reduce the number of imported records and focus on relevant data. For more details, visit: Filter
...
Next configure the Destination settings.