Creating an Entra ID user query

You can create a user sync workflow for Microsoft Entra ID to update your device user lists in Miradore near real time when users are added to or updated in Microsoft Entra ID.

Requirements

You must connect Microsoft Entra ID to Miradore with the required access permissions. For detailed instructions, see Connecting Miradore to Microsoft Entra ID.

Creating a user query

Create a user query to define the list of device users to be synchronized from Microsoft Entra ID to Miradore.

Note: If you don't define a query, all device users will be synced from Microsoft Entra ID to Miradore.

1. In Miradore, navigate to System > Integrations.
2. Select Microsoft Entra ID.
3. Select the Workflows tab.

   Result: The User sync workflow is displayed.

4. Select whether you want to sync all users or only specific users.
   • To sync all users, select Sync all users.
   • To sync specific device users, select Use filtered sync. You can filter by specified query, existing group, or a combination of these.
     For the group filter, go to Entra ID Default directory > Manage > Groups.Go to the Groups Overview page and copy the value of the Object ID to the Miradore Object ID field.
     Note: You can add only one group for the filter. However, you can create so-called transitive groups for Entra ID. These are groups that consist of multiple subgroups.
     Use an additional query if you want to define a scope for the sync inside the group. For the query, use the Microsoft Graph REST API syntax.

     You can use the following operators to define the query:

     • eq meaning 'equals'
     • ne meaning 'not equals'
     • ge meaning 'greater than or equals'
     • le meaning 'less than or equals'
     • and, or to combine conditions

     Select Save to save the filter.

5. Select Save and enable workflow.

Result: The device user data from Microsoft Entra ID is synchronized and the synced device users are listed in Miradore on the Company > Users page.

Note: You can update user data in Miradore only for those users that are imported through the integrations. Users that existed in Miradore before the integration won't be updated even if their data exists in Microsoft Entra ID.

Examples

Filtering for device users of the HR department

To filter for the device users of the HR department, include the following in the Query filter field:

department eq 'HR'

Filtering for an email address

To filter for device users with a Miradore email address, include the following in the Query filter field:

endsWith(mail,'@miradore.com')

Filtering for a certain country and employee hire date

To filter for Finnish employees with hire dates after midnight (UTC time zone) 19th February, 2024, include the following in the Query filter field:

country eq 'Finland' and employeeHireDate ge 2024-02-19T00:00:00Z

Note: Do not include the value of the employeeHireDate parameter in quotes.