Hi Unisys,
Nick, tahnk you for explanation. I understand sync'ing and provisioning logic a bit better.
Can Centrify sync one group in domain? Example: I want to sync o365users group of my domain1.com. Is it possible? Or I will get all the domain1.com users listed in my Office 365 portal? Just some of them will be provisioned with Office 365 licenses and others not, right?
I would like to show my O365 configuration in Centrify Cloud Manager, but there is no Support > Timeframe option in my Cloud Manager. It is due to mo my Centrify Express free edition.
-Yes, you can absolutely only sync one group, with license assignment. The rest of the users will not be synced, nor given a license unless the "Users" field in the "Sync by domain" checkbox is ticked. Take a look at the below screenshots:
As you can see, I have the O365 Role mapped to the "Office 365 Enterprise E1" licenses. When you set up the role mapping you can choose the applicable licenses you'd like to apply:
Lastly, here is the "Sync by domain" checkbox. You'll notice that none of the checkboxes are ticked. This means those objects will not be synced, unless they are added to the role and assigned a license:
Nick, forgot to mention: surely some users were created in O365 via AD Sync. I wonder, should I struggle those unwanted AD accounts in O365 Portal... I can attach required O365 license to control access. It is just a bit confusing to see all those users listed in my O365 Portal while only few of them have O365 licenses.
-If they were added with AD Sync, they will need to either be deleted via powershell, or "taken over" by Centrify, and then deprovisioned, or given licenses. Whether or not you'd like to undertake this process, is purely up to you. If you want to assign some of these users licenses, I would take the latter route and use provisioning to assign them licenses.
Either way, there will be no negative affects of having these users in the portal, it's just somewhat of an eyesore.
Feel free to respond with any further questions!
-Nick