Hello, I have an Azure virtual machine running SQL Server Analysis Services. This VM is joined to my company's domain. We recently migrated from a hybrid setup where we had an on-premise active directory running on a windows server, to a cloud-only Azure Active Directory. Existing users were synced with the help of ADConnect. We have now decomissioned all on-premises resources and transitioned to full cloud AD. In AAD, I have now two sets of users: Users who were created on premises, and synced. New users created in AAD. I can add any user from group (1) above as admins on the SSAS server that's running on the VM, as shown in the screenshot below. They show up in the format DOMAIN\USER. However, I cannot find the users who are AAD cloud-only users and were never synced from the old on-premises AD. Please note that I usually log into the VM using a local admin account in the format LOCAL\User to perform these steps. screenshot1.png

VM Doesn't See AAD Cloud-Only Users But Sees Users Created From On Premises AD

FG 0

Hello,

I have an Azure virtual machine running SQL Server Analysis Services. This VM is joined to my company's domain.

We recently migrated from a hybrid setup where we had an on-premise active directory running on a windows server, to a cloud-only Azure Active Directory. Existing users were synced with the help of ADConnect. We have now decomissioned all on-premises resources and transitioned to full cloud AD.

In AAD, I have now two sets of users:

Users who were created on premises, and synced.
New users created in AAD.

I can add any user from group (1) above as admins on the SSAS server that's running on the VM, as shown in the screenshot below. They show up in the format DOMAIN\USER.

However, I cannot find the users who are AAD cloud-only users and were never synced from the old on-premises AD. Please note that I usually log into the VM using a local admin account in the format LOCAL\User to perform these steps.
screenshot1.png

Sandeep G-MSFT 15,326 Reputation points Microsoft Employee

2023-10-10T08:38:54.46+00:00

@FG

Thank you for posting your question in Microsoft Q&A.

I wanted to check if you are using Azure AD domain services or you have joined the device to Azure AD as Azure AD registered?
FG 0 Reputation points

2023-10-10T11:36:29.1833333+00:00

@Sandeep G-MSFT Thanks for getting back to me.

I am using Microsoft Entra Domain Services, and the synchronization scope is set to "All".
The laptops that all users use to connect are joined to the domain.

Share via

VM Doesn't See AAD Cloud-Only Users But Sees Users Created From On Premises AD