Roles, groups and Entra ID

You needBusiness plan · the rights settings.identity, settings.groups and settings.roles · someone who can grant admin consent in Microsoft Entra

With Entra ID, your IT maintains who is in the workspace. You don't give rights to individual people but to groups. Whoever is in a group gets its roles.

1. 1Connect Entra ID. In Workspace settings › Integrations, choose Connect on Microsoft Entra ID. If you aren't signed in with Entra, it says Sign in with Entra ID.
2. 2Grant consent. Under Who grants the consent?, choose I do or Someone from our IT. For IT, choose Create link and pass it on. Once consent is granted, choose Check.
3. 3Choose the member source. Choose Add a group and the Entra groups whose people should join the workspace.
4. 4Dry run and finish. Leave New people arrive as on prepared — no access, set When switching to Free and choose Finish setup.
5. 5Attach roles to groups. Under Groups, choose Group and From Entra group. Open the group, tick a role under Roles of this group and confirm with Attach role.
6. 6Check rights. Under Roles & rights › Check, choose a person. You see every right and the role and group it comes from.
7. 7Grant access. In the Entra view under Groups, choose Grant access to all on a group, then With email or Without email.