JasonP.78486 (Customer) asked a question.
Okta office365 integration global admin, anyway to do integration with lesser than global admin
I am trying to config o365 so i can import users/groups from azure ad to okta but my main problem is from my understand it require global admin. Why do i need global admin when i am only doing read?
another question is can i select the groups / subgroups to be import instead of entire groups in Azure using schedule import similar to integrate with on premise integration
Hi @JasonP.78486 (Customer) , Thank you for reaching out to the Okta Community!
These are valid concerns and I can understand the need for a less privileged account type, unfortunately this is the limitation of the current implementation.
Some additional details can be found here:
https://support.okta.com/help/s/article/o365-service-account-permission?language=en_US
https://support.okta.com/help/s/article/What-is-the-requirement-for-the-O365-account-used-for-Provisioning?language=en_US
To answer your second question, there currently is not granularity for the application group imports. The integration is not a Profile Source type one. The way I see it, Okta was meant to manage and push the data downstream to the O365 side.
You can suggest feature enhancements to the on the Okta Community page by going to the Community→ Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members. High popularity will increase the likelihood of it being picked up by the Product Team and it being implemented.
More details here.
I've checked and saw that there was an older request for less privileged account types to be used for the O365 integration , but unfortunately it did not get much traction so it was closed. I still recommend opening a request, perhaps things have changed in the meantime.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.