Skip to main content

Managing SCIM provisioned user groups

Provisioning user groups in Microsoft Entra

Groups in Microsoft Entra serve the function of managing access to various resources. When setting up these groups, it is important to organize users based on similar access requirements. Once the groups are established and synced with data.world, they are transformed into Teams within data.world. You can subsequently assign these Teams to specific catalog organizations, allowing you to control their access to data.world resources efficiently.

To provision user groups in Microsoft Entra:

  1. In the left navigation of the application page, click Manage > Users and groups.

  2. Click the Add users and groups button and add your IDP user groups to the application.

  3. Based on your configuration, the group will automatically get added in data.world as a team.

  4. Likewise, remove the user group from the application to deprovision all the users in the group. If you want to revoke access of individual users, just removed them from the group that is provisioned to data.world.

Viewing provisioned user groups in data.world

Once the user group is provisioned in Microsoft Entra, they get added as Teams in data.world. Only users that are SCIM Admin accesss can access the list of teams.

To view the list of available teams:

  1. Click your Profile icon on the right side of the top navigation.

  2. From the menu, select Settings.

  3. On the Settings page, browse to Teams to view the list of available teams.

  4. Click the team name to view its details.

Adding provisioned user groups to catalog organizations in data.world

Once the groups are established and synced with data.world, they are transformed into Teams within data.world. You can subsequently assign these Teams to specific catalog organizations, allowing you to control their access to data.world resources efficiently.

To manage provisioned user groups in data.world:

  1. Browse to the catalog organization and in the Members tab, add the provisioned Team as a member of the organization.

  2. The Team gets added to the catalog organization automatically. You can now manage the team access to resources in data.world.

  3. You can either assign them direct access to resources or you can add them to your existing groups in data.world.

Promoting users as SCIM Admins

To promote users as SCIM admins:

  1. In data.world, browse to the SCIM Admin organization.

  2. Click the Add members button.

  3. In the Invite members to organization window, search and select the SCIM user group provisioned from Microsoft Entra.

  4. Once a group is added in the SCIM Admin organization, they automatically get access to all the user groups provisioned from Microsoft Entra as teams in data.world.