---
updatedAt: 2026-07-16T20:42:41.000Z
---

# Directory services | EPM-L

EPM-L supports connections to Microsoft Entra ID. Add users and groups from Entra ID in Role Based Policy after the connection to Microsoft Entra ID is established.

## Requirements

When configuring the Microsoft Entra ID app registration, set the following permissions:

* Group.Read.All\
  Type: Application
* User.Read.All\
  Type: Application

## Add a connection

To add a connection:

1. Sign into **app.beyondtrust.io**.\
   The **BeyondTrust Home** page displays.
2. Click **![Pathfinder navigation menu](https://files.readme.io/2b07f6281d5ecf5876fe350ed9437777bc2a32fd33361a3c525eca8f01648b3d-image.png) > Endpoint Privilege Management for Linux > Settings**.\
   The **Settings** page displays.
3. Click **Directory Services**.
4. Click **Add Connection**.
5. Select **Entra ID** from the list.

[block:image]
{
  "images": [
    {
      "image": [
        "https://files.readme.io/aebfbc24e357ff3063d6f2dae76f0633818b2caf45dcd58cba1a5e9cb95b81c5-add-directory-service.png",
        "",
        "Add a directory service in EPM for Linux"
      ],
      "align": "center"
    }
  ]
}
[/block]

6. Add the tenant ID.
7. Select a name attribute from the list.
8. Add the client ID and client secret from your Microsoft Entra ID instance.
9. Click **Test Settings** to ensure the connection between EPM-L and the directory service works.
10. Click **Save Directory Service Settings**.

## Delete a directory connection

1. Sign into **app.beyondtrust.io**.\
   The **BeyondTrust Home** page displays.
2. Click **![Pathfinder navigation menu](https://files.readme.io/2b07f6281d5ecf5876fe350ed9437777bc2a32fd33361a3c525eca8f01648b3d-image.png) > Endpoint Privilege Management for Linux > Settings**.\
   The **Settings** page displays.
3. Click **Directory Services**.
4. Select a connection.
5. Click **Delete Connection**.
6. Click **Delete** to confirm.