Microsoft access 5 min readUpdated September 19, 2026
Connect Microsoft Entra ID
What the Microsoft connection imports, which permissions it uses, and how to verify it.
For OwnersFor AdminsFor ITs
The short answer
An organization admin connects the customer’s Microsoft tenant so WorkforcePilot can read directory users, security groups, and memberships used for reporting scope and manager access.
01
What the connection does
WorkforcePilot uses the organization’s Microsoft Entra directory to identify users, security groups, and group memberships. Those records become the foundation for coverage checks and manager scope.
The published connection is directory-focused. It does not request Microsoft Mail.Read or Files.Read permissions for workforce monitoring.
02
Connect and verify
- 1Sign in as a WorkforcePilot owner or company admin.
- 2Open Settings and start the Microsoft 365 connection.
- 3Use an account authorized to approve the requested directory permissions for the correct tenant.
- 4Return to Security Groups and confirm the expected groups and memberships appear.
- 5Hide groups that should not be available for manager assignment or reporting.
Keep learning