Skip to content

Commit 7c76d39

Browse files
Merge pull request #237080 from kenwith/patch-95
Updates for acrolinx analysis.
2 parents 439849f + 68473e9 commit 7c76d39

File tree

1 file changed

+11
-9
lines changed

1 file changed

+11
-9
lines changed

articles/active-directory/app-provisioning/export-import-provisioning-configuration.md

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -8,14 +8,14 @@ ms.service: active-directory
88
ms.subservice: app-provisioning
99
ms.topic: how-to
1010
ms.workload: identity
11-
ms.date: 10/20/2022
11+
ms.date: 05/05/2023
1212
ms.author: kenwith
1313
ms.reviewer: arvinh
1414
---
1515

1616
# How-to: Export provisioning configuration and roll back to a known good state
1717

18-
In this article, you'll learn how to:
18+
In this article, you learn how to:
1919

2020
- Export and import your provisioning configuration from the Azure portal
2121
- Export and import your provisioning configuration by using the Microsoft Graph API
@@ -28,14 +28,16 @@ To export your configuration:
2828

2929
1. In the [Azure portal](https://portal.azure.com/), on the left navigation panel, select **Azure Active Directory**.
3030
1. In the **Azure Active Directory** pane, select **Enterprise applications** and choose your application.
31-
1. In the left navigation pane, select **provisioning**. From the provisioning configuration page, click on **attribute mappings**, then **show advanced options**, and finally **review your schema**. This will take you to the schema editor.
31+
1. In the left navigation pane, select **provisioning**. From the provisioning configuration page, click on **attribute mappings**, then **show advanced options**, and finally **review your schema**. The schema editor opens.
3232
1. Click on download in the command bar at the top of the page to download your schema.
3333

3434
### Disaster recovery - roll back to a known good state
3535

36-
Exporting and saving your configuration allows you to roll back to a previous version of your configuration. We recommend exporting your provisioning configuration and saving it for later use anytime you make a change to your attribute mappings or scoping filters. All you need to do is open up the JSON file that you downloaded in the steps above, copy the entire contents of the JSON file, replace the entire contents of the JSON payload in the schema editor, and then save. If there is an active provisioning cycle, it will complete and the next cycle will use the updated schema. The next cycle will also be an initial cycle, which reevaluates every user and group based on the new configuration. Consider the following when rolling back to a previous configuration:
36+
Exporting and saving your configuration allows you to roll back to a previous version of your configuration. We recommend exporting your provisioning configuration and saving it for later use anytime you make a change to your attribute mappings or scoping filters. Open the JSON file that you downloaded, copy the entire contents. Next, replace the entire contents of the JSON payload in the schema editor, and then save. If there's an active provisioning cycle, it completes and the next cycle uses the updated schema. The next cycle is also an initial cycle, which reevaluates every user and group based on the new configuration.
3737

38-
- Users will be evaluated again to determine if they should be in scope. If the scoping filters have changed a user is not in scope any more they will be disabled. While this is the desired behavior in most cases, there are times where you may want to prevent this and can use the [skip out of scope deletions](./skip-out-of-scope-deletions.md) functionality.
38+
Some things to consider when rolling back to a previous configuration:
39+
40+
- Users are evaluated again to determine if they should be in scope. If the scoping filters have changed, a user isn't in scope anymore because they're disabled. While the behavior is the desired in most cases, there are times where you may want to prevent it. To prevent the behavior, use the [skip out of scope deletions](./skip-out-of-scope-deletions.md) functionality.
3941
- Changing your provisioning configuration restarts the service and triggers an [initial cycle](./how-provisioning-works.md#provisioning-cycles-initial-and-incremental).
4042

4143
## Export and import your provisioning configuration by using the Microsoft Graph API
@@ -45,7 +47,7 @@ You can use the Microsoft Graph API and the Microsoft Graph Explorer to export y
4547
### Step 1: Retrieve your Provisioning App Service Principal ID (Object ID)
4648

4749
1. Launch the [Azure portal](https://portal.azure.com), and navigate to the Properties section of your provisioning application. For example, if you want to export your *Workday to AD User Provisioning application* mapping navigate to the Properties section of that app.
48-
1. In the Properties section of your provisioning app, copy the GUID value associated with the *Object ID* field. This value is also called the **ServicePrincipalId** of your App and it will be used in Microsoft Graph Explorer operations.
50+
1. In the Properties section of your provisioning app, copy the GUID value associated with the *Object ID* field. This value is also called the **ServicePrincipalId** of your App and it's used in Microsoft Graph Explorer operations.
4951

5052
![Workday App Service Principal ID](./media/export-import-provisioning-configuration/wd_export_01.png)
5153

@@ -56,7 +58,7 @@ You can use the Microsoft Graph API and the Microsoft Graph Explorer to export y
5658

5759
![Microsoft Graph Sign-in](./media/export-import-provisioning-configuration/wd_export_02.png)
5860

59-
1. Upon successful sign-in, you will see the user account details in the left-hand pane.
61+
1. Upon successful sign-in, you see the user account details in the left-hand pane.
6062

6163
### Step 3: Retrieve the Provisioning Job ID of the Provisioning App
6264

@@ -66,7 +68,7 @@ In the Microsoft Graph Explorer, run the following GET query replacing [serviceP
6668
GET https://graph.microsoft.com/beta/servicePrincipals/[servicePrincipalId]/synchronization/jobs
6769
```
6870

69-
You will get a response as shown below. Copy the "id attribute" present in the response. This value is the **ProvisioningJobId** and will be used to retrieve the underlying schema metadata.
71+
You get a response as shown. Copy the `id` attribute present in the response. This value is the **ProvisioningJobId** and is used to retrieve the underlying schema metadata.
7072

7173
[![Provisioning Job ID](./media/export-import-provisioning-configuration/wd_export_03.png)](./media/export-import-provisioning-configuration/wd_export_03.png#lightbox)
7274

@@ -99,4 +101,4 @@ In the "Request Headers" tab, add the Content-Type header attribute with value
99101

100102
[![Request Headers](./media/export-import-provisioning-configuration/wd_export_05.png)](./media/export-import-provisioning-configuration/wd_export_05.png#lightbox)
101103

102-
Select **Run Query** to import the new schema.
104+
Select **Run Query** to import the new schema.

0 commit comments

Comments
 (0)