Directory services

EPM-L supports connections to Microsoft Entra ID. Add users and groups from Entra ID in Role Based Policy after the connection to Microsoft Entra ID is established.

Requirements

When configuring the Microsoft Entra ID app registration, set the following permissions:

• Group.Read.All
  Type: Application
• User.Read.All
  Type: Application

Add a connection

To add a connection:

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click > Endpoint Privilege Management for Linux > Settings.
   The Settings page displays.
3. Click Directory Services.
4. Click Add Connection.
5. Select Entra ID from the list.

6. Add the tenant ID.
7. Select a name attribute from the list.
8. Add the client ID and client secret from your Microsoft Entra ID instance.
9. Click Test Settings to ensure the connection between EPM-L and the directory service works.
10. Click Save Directory Service Settings.

Delete a directory connection

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. Click > Endpoint Privilege Management for Linux > Settings.
   The Settings page displays.
3. Click Directory Services.
4. Select a connection.
5. Click Delete Connection.
6. Click Delete to confirm.