Users from on-prem AD aren't synced to Azure AD as Guest

user_13680239 0
Viewed 941

I have a setup where I have installed the Azure AD on-prem cloud provisioning agent on a Domain joined server. The setup was successful. I followed the documentation here:

https://docs.microsoft.com/en-us/azure/active-directory/cloud-provisioning/how-to-prerequisites

After configuring the agent in Azure AD, Users can only be synced as Member. Is there a way to sync users as Guest using the provisioning agent?

Also, is there a Microsoft Graph API to validate the agent and do the configuration?

microsoft-graph-api azure-active-directory
1 Answers

On-prem AD isn't synced to Azure AD as Guest and those synced users cannot be a Guest user and it's as per design.

You can invite guest users to the directory, to a group, or to an application. After you invite a user through any of these methods, the invited user's account is added to Azure Active Directory (Azure AD), with a user type of Guest. The guest user must then redeem their invitation to access resources. Any user sync via AD connect will not be a guest user.

user_129767040
Related