Auto user provisioning

Keithb

Can someone explain to me what will happen if I enable auto provisioning in Entra with our groups that are already setup in Azure AD? We already have users using smartsheets. They have had their Azure accounts given groups that coincide with the Smartsheets groups, but I'm just wondering if a user was not granted the group in Azure that gives them particular access EA (license user, group admin, or even user) will they be deactivated?

Lee Joramo

The question of what happens to existing Smartsheet groups when you enable Entra/Azure AD provision just came up for us too.

Genevieve P.

Hi @Keithb and @Lee Joramo

• If the user was not added to any Smartsheet role groups in Entra, then they will not be updated/affected in the Smartsheet app.
  
• If they were assigned to a Smartsheet role group in Entra, provisioned into Smartsheet as a result and then removed from that group, when the next provisioning cycle occurs that user would be deactivated.
  
• If there exists a user in Smartsheet that has an account in Entra, but is not added to any Entra groups that are mapped to Smartsheet roles, Entra will essentially ignore them for the context of provisioning to Smartsheet.

Entra ID will only send updates for users that are "assigned" to the Smartsheet app. The way users are assigned is by adding them to the mentioned role-mapped Entra groups.

I hope that helps!

Genevieve