Skip to content

Is there a way to automatically grant a default Permission Set to users as they're provisioned into IFS Cloud through Azure AD SCIM, rather than needing to assign it manually after each user is created?

Answer

From 23R1 onward, use User Group Provisioning with Azure Active Directory rather than trying to assign a Permission Set directly per-user through SCIM — grant the Permission Set to a User Group in IFS, then have SCIM provisioning add newly-provisioned users to that same User Group; this achieves the default-permission-set-on-provisioning outcome indirectly, through group membership, since direct per-user permission-set assignment isn't itself exposed as a SCIM provisioning option.

← Browse Security and access questions