Import groups
You can import all groups or only those that match specific attributes through the assistant.
API permission requirement
To import groups, you must add the following API permission in the Azure Portal:
- Sign in to Azure Portal.
- Go to Microsoft Entra ID and select the server.
- Click App registrations and select the application configured for the firewall.
- Click API permission > Add a permission.
-
Click Microsoft Graph > Application permissions and add the
Group.Read.All
permission.
Import group assistant
Go to Authentication > Servers and click Assistant for importing groups from the Microsoft Entra ID server.
You can import all groups or import groups that match the attributes you specify, such as Display name and Description.
You can apply the following policies to all groups or to individual groups:
- Surfing quota
- Access time
- Network traffic
- Traffic shaping
Important
You must synchronize the time between the firewall and Microsoft Entra ID. Otherwise, the connection may fail.