Microsoft Entra ID: Connect Source Tenants
Who can use this feature
Anyone with these permissions: Manage source connections
This article explains how to connect a Microsoft Entra ID source tenant so Eon can back up its directory.
Once the tenant is connected, each snapshot captures your users and groups together with the memberships, ownership, licenses, and role assignments that tie them together. That’s what lets you bring a deleted account back as a working identity later, instead of recreating it and its access by hand.
Connect a source tenant
In this procedure, you’ll grant Eon the read-only Microsoft Graph permissions it needs to back up the directory in the tenant.
You can connect a source tenant from the SaaS applications page, by clicking New Connection and selecting Connect Microsoft Entra ID. The Connect Microsoft Entra ID panel opens.
Before you start
Before you connect a Microsoft Entra ID source tenant, make sure:
-
You can sign in to the tenant as a Global Administrator.
-
Your Azure tenant is set up in Eon. For instructions, see Azure: Set Up Azure Tenants.
Grant the permissions in Microsoft
-
Choose Terraform or Bash with the deployment toggle. Eon shows the read-only Microsoft Graph permissions it’s requesting.
-
Sign in to the tenant as a Global Administrator and run the generated script:
Bash
Terraform
Run the generated
entra_source_consent.shscript. -
Select I have granted the permissions in Microsoft.
Eon connects the Microsoft Entra ID source tenant. To start backing up its directory, assign the tenant to a Microsoft Entra ID backup policy.