Fix Azure AD Integration Error: Enable Directory.Read.All Permission

Short answer:
If your Entra ID (Azure AD) integration fails, enable the Directory.Read.All permissions in Microsoft Graph and grant admin consent.

Symptom

You may encounter an error during your Entra ID (Azure AD) integration:

Solution: Enable Directory.Read.All Permission

1. Go to the Azure Portal.
2. Navigate to Microsoft Entra ID (Azure AD).
3. Click App registrations.
4. Select your Xink application.
5. Go to API permissions.

6. Click Add a permission.
7. Select Microsoft Graph.
8. Choose Application permissions.
9. Enable Directory.Read.All (Read directory data).

10. Click Save.
11. Click Grant admin consent and confirm.

Result

Once the permission is granted, return to the Xink portal and recheck the Azure AD integration. The connection should now complete successfully.

Explanation

The integration requires permission to read directory data from Microsoft Entra ID. Without Directory.Read.All, Xink cannot access user and group information, which causes the connection to fail.

Learn more

IT Pro: How to read groups from Active Directory

IT Pro: How to filter users in Azure AD using OData

IT Pro: How to filter users in Azure AD using Client-Side

IT Pro: How to sync custom attributes from Azure AD (Hybrid)

IT Pro: Filter users using group expressions (wildcards)