Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Microsoft Graph API Connection Configuration

...

  1. Copy the "Value" of the newly created client secret.

Note

Important: Ensure you copy the Value, not the Secret ID. The Value is required for authentication and will be hidden once you leave the page.

...

9- Select “Microsoft Graph” and add Directory.Read.All for the “Application” type.

Image Added

Info

Pro Tip:

To grant the minimum permissions, you may use:

  • User.Read.All

  • GroupMember.Read.All

...

You may encounter permission errors if your environment has nested groups, where a parent group has sufficient access but a child group does not

...

. In that case, you may use:

  • User.Read.All

  • Group.Read.All

If you need to collect the licenses, you need permission to read the directory.

  • Directory.Read.All

The table below explains the different levels of permissions and their capabilities.

Permissions and their capabilities

  • User.Read.All

  • GroupMember.Read.All

  • User.Read.All

  • Group.Read.All

  • Directory.Read.All

...

Image Removed

Collects Users and Groups

(tick)

(tick)

(tick)

Collects nested groups (parent-child relationship)

(error)

(tick)

(tick)

Collects the Licenses

(error)

(error)

(tick)

  1. Ask your Azure Admin to provide consent for the required permission. The settings should be as follows:

...

  1. Fill in the required fields under Azure Connection Settings in the Source tab of Azure AD Importer for JSM Assets. Then, click "Save & Check Connection" to confirm the configuration is successful.

...

  1. (Optional) You can apply filters for Users and Groups to reduce the number of imported records and focus on relevant data. For more details, visit: Filter

  2. Next configure the Destination settings.

...