Q: We need to reenable nearly 20,000 Azure accounts in bulk and reset the last login date/time for them. Is there a quick way to do this? The account names can be imported from a spreadsheet.
A: Yes, using the Export Connections Provider.
The process will probably take a few hours for the activity to process since the Microsoft graph API is not particularly fast.
Assuming the spreadsheet has column headers and a column containing unique values to identify each account, the basic steps would be:
- Go to Identity Panel / Settings / Providers
- Locate and expand your (existing) Export Connections Provider strip (this is typically named Sync Actions)
- Under Additional Systems select type Excel Provider and click +New
- Assign a name (e.g. Bulk Updates), then expand the strip
- Specify values for the following:
-
Anchor Column (e.g. UPN, EmployeeID, CloudAnchor, etc.) depending on the unique key column name in your spreadsheet
Notes:- UPN makes a good choice for matching on Azure/Entra ID!
- The upload will run slightly faster if you have object Id.
- Start with a small subset of the users, e.g. 3-4 rows for testing it out, then build up to a full dataset.
- Worksheet (e.g. Sheet1)
- Object Type (e.g. person)
- (optional) enable the Create Silo checkbox if you want to be able to search the Time Traveler for items in your spreadsheet
- Leave all other fields with default values
-
Anchor Column (e.g. UPN, EmployeeID, CloudAnchor, etc.) depending on the unique key column name in your spreadsheet
- Click save in the floating toolbar
- Refresh the browser, then locate and expand the Sync Actions strip once more
- Upload your spreadsheet
- Go to Identity Panel / Test Panel / Suites, make sure Sync Actions export provider is selected in the Test Suites header section
- Click +New to add a Test Suite
- Assign a unique test suite name (e.g. Bulk updates), then expand the strip
- Click +New under the Tests heading to add a new Test Case
- Assign a unique test case name (e.g. Re-enable users), then expand the strip
- In the Select Type drop-down list under the Actions heading, select Load Fixture and click +New
- Assign a unique fixture name (e.g. Re-enable users), select Iterate from the System drop-down list, then expand the strip
- Select the new Excel provider from the Iterate System drop-down list as the data source
- Click +New under the Fixtures Sets heading, and assign a unique Fixture Name (e.g. Update Entra ID), then expand the strip
- Select the Graph Update User fixture from the Select Type drop-down list and click +New
- Assign a unique fixture name (e.g. Re-enable users), select your Azure Provider from the System drop-down list, then expand the strip
- Set the following properties:
- Object Id = [UPN] (assuming UPN is a column name in the spreadsheet)
- Reset Password = <constant value> (or use a [RandomPassword()] function)
-
Add attributes and settings for the following:
- accountEnabled = True.
Note: For the above to work your graph provider needs to have User Administrator role.
Comments
0 comments
Please sign in to leave a comment.