Skip to content

Import groups

You can import all groups or only those that match specific attributes through the assistant.

API permission requirement

To import groups, you must add the following API permission in the Azure Portal:

  1. Sign in to Azure Portal.
  2. Go to Microsoft Entra ID and select the server.
  3. Click App registrations and select the application configured for the firewall.
  4. Click API permission > Add a permission.
  5. Click Microsoft Graph > Application permissions and add the Group.Read.All permission.

    API permission.

Import group assistant

Go to Authentication > Servers and click Assistant for importing groups Import button. from the Microsoft Entra ID server.

You can import all groups or import groups that match the attributes you specify, such as Display name and Description.

You can apply the following policies to all groups or to individual groups:

  • Surfing quota
  • Access time
  • Network traffic
  • Traffic shaping


You must synchronize the time between the firewall and Microsoft Entra ID. Otherwise, the connection may fail.