SaaS Manager: Integrating HR users (Azure)

[TMGSLM]

Hi Everyone,

We're onboarding a SaaS application and need to get the HR users from AzureAD for that purpose. The concern is- our customer is not willing to grant us "directory.read.all" permission rather suggesting to have "user.read.all".

Is there any way to get this integrated with the mentioned permission?

Thanks.

[JohnSorensenDK · Accepted solution]

@TMGSLM 

The directory.read.all is a minimum requirement Azure Client Credentials 

Thanks,

[TMGSLM]

@JohnSorensenDK  Thanks.

A follow-up query please, why do we need directory permissions when we'd need to extract the details of Azure-AD users only and not the Enterprise application in Az.

[JohnSorensenDK]

@TMGSLM 

I must admit that this isn't entirely clear to me either, but I know that there are differences between access rights (permissions) in the Microsoft Graph API vs. Azure AD Graph API from Google searching the Internet and finding many discussions around permissions required when using these API's.

Thanks,