synchronize user with Entra cloud sync

Question

Hello, Here is my usecase, I would like to sync users on a AD. I'm currently doing this with Cloud sync with the configuration EntraID to AD. To test that, I have a security group "group-for-onPrem" with one User inside it "test-user-AD". I want to sync this group inside an OU. When I try to Provision On demand, The group is created inside the desired OU. That's good. But for the user, the provison logs says it's skipped for the following reason

SO i have checked, but the user is assigned to application (user profile -> applications -> the user is assigned with Default access role). Why it says that the user is not assigned ? I'm missing something important ?

Answer 1

@Jérôme Thank you for reaching out to us, If I understand correctly are you trying to perform user writeback via Cloud Sync? if my understanding of the issue/scenario is incorrect, please let me know. With this configuration Entra ID to AD, if you review the attribute mapping section you will see only groups mapping (which means only group writeback operation is supported from Entra ID to AD).

User writeback is not a supported option. You can sync users/groups/contacts from AD to Entra ID but not the other way. Let me know if you have any further questions, feel free to post back.