Restrict "Synchronize ENTRA Users" to the Security group configured in the ADMIN center
Nobody has claimed this yet.
- Dominant language
- AL
- Stars
- 683
- Forks
- 459
- Avg merge
- 3d 26m
- Merged PRs (30d)
- 633
Description
Why do you need this change?
In an extension in Dynamics BC, I can synchronise Entra users by calling SynchronizeAllLicensedUsersFromDirectory in Codeunit "Azure AD User Management". However, this copies all Entra users to my BC environment. I want to restrict this to the User Security Group that may be configured in the Admin center. BC does this with FetchUpdatesFromEnvironmentDirectoryGroup but that code has scope OnPrem and I want to use it in a SAAS implementation.
Describe the request
Please provide a possibility for a SAAS deployment to synchronise Entra users, estricted to the User Security Group that may be configured in the Admin center.
Provide an implementation (optional)
- I will provide the implementation for this extensibility request
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by comparing SynchronizeAllLicensedUsersFromDirectory with FetchUpdatesFromEnvironmentDirectoryGroup, noting that the latter is OnPrem-only. Trace how the Admin center User Security Group is exposed to SaaS extensions and define completion as synchronization limited to that configured group without relying on OnPrem scope.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100