...
First, in the
Comma separated roles to be synced
provide an AAD Specific roles list, if you want only users of certain roles on AAD to get synced. e.g. If you want to sync all Azure AD users leave this box empty. If you only want all users which are havingGlobal administrator & Global reader
roles your configuration will look like as follows.:
Note: If any roles are provided, the
Sync All Accounts? (Yes/No)
value will be consideredNo
, even if you sayYes
Second,
Is this a directory? (Yes/No)
if this is your organization directory then sayYes
otherwise if it is a non-directory app sayNo
, e.g. An organization that uses AAD as the directory will have the following configuration, By default, it will beNo
Sync All Accounts? ( Yes/No )
fillingYes
here would sync all your organization users,No
will sync only users who have any roles assigned to them, User without any roles will not be synced. Default valueYes
(unless roles are specified underComma separated roles to be synced
in which case this configuration will always beNo
Finally,
Sync All Groups? ( Yes/No )
will sync all groups from AAD if providedYes
otherwise only security-enabled groups are synced. Default isNo
...