Connect Viio to your Microsoft Entra ID tenant (formerly Azure Active Directory) to import your core employee directory—users, groups and basic organisation metadata. The sync is read‑only and finishes in minutes.
Capabilities
✅ Employees | Pulls name, primary email, department and status for every account so you can map SaaS usage to real people. |
✅ Organisation | Fetches groups and org units, as we tenant‑level details such as primary domain. |
Prerequisites
Global Admin (or Cloud Application Admin) rights to grant tenant‑wide consent.
At least one Microsoft 365 or Entra licence (any tier) – no premium add‑ons are required.
Setup
In Viio → Integrations select Microsoft Entra ID (Azure AD).
Click Connect to Microsoft. You’ll be redirected to the Microsoft consent screen.
Sign in with a Global Admin account.
Review the read‑only scopes requested by Viio and click Accept.
Back in Viio, give the integration a clear name (e.g. “Acme – Entra ID Directory”) and click Save.
Viio queues the first sync immediately; allow up to 30 minutes for data to appear.
Troubleshooting & FAQ
Issue | Quick fix |
“Need admin approval” banner | Ensure you’re signed in as a Global Admin or open the consent URL in an InPrivate window to avoid cached roles. |
No users after one hour | In Entra ID → Enterprise Applications → Viio, make sure Directory.Read.All is still granted. Re‑consent if removed. |
Wrong department or manager fields | Entra ID returns the values stored on each user object. Update them in Microsoft 365 admin centre and they’ll reflect in the next nightly sync. |
Technical details
Auth method: Microsoft Graph OAuth 2.0 tenant‑wide consent.
Primary endpoints:
GET /users?$select=id,displayName,userPrincipalName,department,accountEnabledGET /groups?$select=id,displayName,mailEnabled,securityEnabledGET /organization
Permissions requested:
User.Read.AllGroup.Read.AllOrganization.Read.All
Data flow: One‑way, read‑only from Entra ID → Viio. Viio never writes to Microsoft.