SOLVED Unable to cloud sync Azure group with MECM collection

[Maithri_Bangalore]

Using the console GUI, right-clicked on my user collection --> Properties --> Cloud Sync --> Add. I searched for the Entra group I want the collection to sync with, found it, selected it, then clicked OK. No error, but no relationship get created

 

[Prajwal Desai]

I did not understand your issue at all. Please elaborate and add some screenshots for better understanding.

 

[Maithri_Bangalore]

Thanks for your reply.

I have security role access in SCCM ("Read-only Analyst", "Asset Manager", "Application Deployment Manager", "Application Administrator", "Operating System Deployment Manager", "Operations Administrator", "Reporting User").
I'm trying to enable cloud sync on a user collection to an Entra group, but it does not work.
Using the console GUI, right-clicked on my user collection --> Properties --> Cloud Sync --> Add. I searched for the Entra group I want the collection to sync with, found it, selected it, then clicked OK. No error, but no cloud sync happens.

 

[Harshit Pandey]

Under the cloud management properties, check if you have enabled the option enable Microsoft Entra ID group sync.

 

[Maithri_Bangalore]

Under the cloud management properties, check if you have enabled the option enable Microsoft Entra ID group sync.

View attachment 6433

Yes Harshit it is enabled

 

[Prajwal Desai]

What is the goal here?. If i understand your question correctly, you want the device groups created in Entra ID to appear in the ConfigMgr console, is that correct?

 

[Maithri_Bangalore]

What is the goal here?. If i understand your question correctly, you want the device groups created in Entra ID to appear in the ConfigMgr console, is that correct?

Prajwal:

Opposite, MECM collection to appear in Entra

 

[Prajwal Desai]

Understood. Can you see the on-prem users and devices (not groups) synced in the Entra portal?

 

[Maithri_Bangalore]

Understood. Can you see the on-prem users and devices (not groups) synced in the Entra portal?

Yes, I can see. When my SCCM full administrator (he is also global admin who created azure services in Configuration manager console) syncs it works but not for me. I am not full administrator (but I have these access "Read-only Analyst", "Asset Manager", "Application Deployment Manager", "Application Administrator", "Operating System Deployment Manager", "Operations Administrator", "Reporting User"

 

[Prajwal Desai]

At the beginning of the thread, you did not mention that full administrator role in ConfigMgr can view the collections in the cloud. For the whole time, we were troubleshooting the sync issue. I guess it's a permission related issue. See if this helps: https://learn.microsoft.com/en-us/mem/configmgr/cloud-attach/use-intune-rbac

 

[Maithri_Bangalore]

At the beginning of the thread, you did not mention that full administrator role in ConfigMgr can view the collections in the cloud. For the whole time, we were troubleshooting the sync issue. I guess it's a permission related issue. See if this helps: https://learn.microsoft.com/en-us/mem/configmgr/cloud-attach/use-intune-rbac

Thanks, Prajwal for your suggestions. Do I need to be a full administrator in SCCM to do cloud sync through configuration manager console? or do I need any separate permission in SCCM

 

[Maithri_Bangalore]

Thanks, Prajwal for your suggestions. Do I need to be a full administrator in SCCM to do cloud sync through configuration manager console? or do I need any separate permission in SCCM

Happy to announce that the issue is reolved

 

[Prajwal Desai]

Happy to announce that the issue is reolved

I believe it was a permission issue?

 

[Maithri_Bangalore]

I believe it was a permission issue?

we changed security scope permissions

 

[Prajwal Desai]

Glad to hear you sorted it. Marking this thread as solved.