Provision Office 365 custom role assignments
Configure Okta to be the source of truth of custom role assignments for Office 365 by provisioning custom role assignments to Microsoft Entra ID.
About this task
When you enable provisioning of custom role assignments to Microsoft Entra ID, the values from Okta overwrite those in Microsoft Entra ID. Ensure that all of the role settings in Okta are correct before you enable provisioning and perform an import, as the original values in Microsoft Entra ID can't be recovered.
Before you begin
- You have an Okta admin role with permission to manage apps.
- The Office 365 app instance has Import custom role names enabled and the import successfully completed. See Import Office 365 custom roles.
- Verify that the custom role assignments in Okta are correct. You must update custom role assignments in Okta to match any values that you want to keep from Microsoft Entra ID, as all values in Microsoft Entra ID will be overwritten when records are synced.
Procedure
- In the Admin Console, go to .
- Select your Office 365 app instance.
- Go to the Provisioning tab.
- Select To App under Settings.
- Click Edit in the Settings section.
- Select Provision custom role assignments in the Custom role settings section.
- Click Save.
After you complete these steps, updates to custom role assignments in Okta are provisioned to Microsoft Entra ID. Additionally, after you enable Provision custom role assignments, the Office 365 values are pushed from Okta to Microsoft Entra the next time an update occurs.
To force Okta to provision the role assignments of all Office 365 users back to Microsoft Entra, you can add an attribute to the app user profile (for example, ExtensionAttribute10), and then edit the Okta User to Microsoft Office 365 user profile mapping to include that attribute. When you save and apply the updates to the profile, all users are pushed to Microsoft Entra. These updates to Microsoft Entra can't be reversed. See Add or remove custom directory schema attributes and Map Okta attributes to app attributes in the Profile Editor.