This guide will walk you through the steps of adding permission to fix if you encounter the error message below on your Entra ID (Azure AD) Integration.
Solution:
Enable Directory.ReadAll permission on Graph.
Open Portal > Active Directory > App Registratoin > API Permission.
Select Microsoft Graph, then in the Application Permissions menu, tick each of the following:
- Read directory data
Save the selected permission, then click on Grant admin consent.
Once the permission has been granted you can proceed to check the Azure AD integration and connection will be successful.
Learn more
IT Pro: How to read groups from Active Directory (AD on-premises and Azure AD).
IT Pro: How to filter users in Azure AD using OData.
IT Pro: How to filter users in Azure AD using Client-Side.
IT Pro: How to sync custom attribute of Azure AD to Xink portal (Hybrid AAD)
IT Pro: How to filter users in Azure AD using Filter by Group Regular Expression (Wildcards)