Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Microsoft Graph API Connection Configuration

...

  1. Copy the "Value" of the newly created client secret.

Note

Important: Ensure you copy the Value, not the Secret ID. The Value is required for authentication and will be hidden once you leave the page.

...

9- Select “Microsoft Graph” and add Directory.Read.All for the “Application” type.

Image Added

Info

Pro Tip:

To grant the minimum permissions, you may use:

  • User.Read.All

  • GroupMember.Read.All

...

You may encounter permission errors if your environment has nested groups, where a parent group has sufficient access but a child group does not

...

. In that case, you may use:

  • User.Read.All

  • Group.Read.All

If you need to collect the licenses, you need permission to read the directory.

  • Directory.Read.All

The table below explains the different levels of permissions and their capabilities.

Permissions and their capabilities

  • User.Read.All

  • GroupMember.Read.All

  • User.Read.All

  • Group.Read.All

  • Directory.Read.All

...

Image Removed

Collects Users and Groups

(tick)

(tick)

(tick)

Collects nested groups (parent-child relationship)

(error)

(tick)

(tick)

Collects the Licenses

(error)

(error)

(tick)

  1. Ask your Azure Admin to provide consent for the required permission. The settings should be as follows:

...