The Office 365 application can import groups in Okta, not just users. Depending on how the Office integration was configured, errors might appear when trying to enable or disable the Import Groups option and save the provisioning settings.

If the following error appears, Okta does not have the required permission to do the requested operation in Office:

There was a failure while saving provisioning settings. Please grant consent by authenticating with Microsoft Graph on the Integrations page.

• Office 365
• Provisioning
• Import
• Group Import

1. Click on the Sign On tab of the Office integration, click Edit, scroll down until the "Advanced API Access" option is visible, and check the box next to it.
2. Click on the Re-Authenticate with Microsoft Office 365 button. Make sure to use the same Microsoft global administrator account used to configure provisioning to authenticate in Microsoft. When the Permissions requested list is displayed, click on Accept.

3. Click Save to save the Office integration settings.

Related References

• Provide Microsoft admin consent for Okta