...
First, in the
Comma separated roles to be synced
provide an AAD Specific roles list, if you want only users of certain roles on AAD to get synced. e.g. If you want to sync all Azure AD users leave this box empty. If you only want all users which are havingGlobal administrator & Global reader
roles your configuration will look like as follows,.Second,
Is this a directory? (Yes/No)
if this is your organization directory then sayYes
otherwise if it is a non-directory app sayNo
, e.g. An organization that uses AAD as the directory will have the following configuration, By default, it will beNo
Sync All Accounts? ( Yes/No )
fillingYes
here would sync all your organization users,No
will sync only users who have any roles assigned to them, User without any roles will not be synced. Default valueNo
Finally,
Sync All Groups? ( Yes/No )
will sync all groups from AAD if providedYes
otherwise only security-enabled groups are synced. Default isNo
...