When Itential Platform is configured to use Microsoft Entra ID (formerly Azure Active Directory) as its AAA source, Itential Platform permissions can be assigned to users via Entra ID group membership. To do this, Entra ID groups present in the connected tenant are synchronized to Itential Platform. An Itential Platform administrator can then assign roles to these groups, and users receive the corresponding permissions when they log in with their Azure credentials.
The Azure adapter’s group synchronization behavior is controlled by its service configuration — specifically, by the parameters of the groupSync property:
The exact steps needed to configure group synchronization depend on your environment. In general:
all may be acceptable for development environments, but is likely to cause performance issues in production environments.master or account synchronization method, retrieve the desired group or account Object ID from Azure.masterGroup or serviceAccount as appropriate.Object IDs are retrieved from the Azure portal. For further information about Object IDs, refer to the Microsoft Azure documentation.
