This update introduces two changes to CloudRadial UCP: a reorganized Microsoft 365 settings interface and a new Microsoft 365 Group Mapping feature. Both changes apply across all UCP tiers and require no reconfiguration if you already have Microsoft 365 connected to your client companies. Existing sync settings carry over automatically.
This article covers the following:
- What Changed in the Interface?
- About Microsoft 365 Group Mappings (and Instructions)
- Managing and Removing Mappings
- Frequently Asked Questions
What Changed in the Interface?
Two interface changes were made to reduce option overload and give the Microsoft 365 tab a more purposeful role in company management.
M365 Settings Removed from the Company Edit Page
Microsoft 365 sync settings previously appeared on the company add/edit form. These have been moved to reduce noise during initial setup. The settings themselves have not changed; only their location has.
Microsoft 365 Tab Redesigned
The Microsoft 365 tab (accessible by selecting, not editing, a company in Clients) has been significantly expanded. It now serves as the single home for everything M365-related for a given company:
- Connection status for the Administrative Access Application and User Login Access Application
- All Microsoft 365 Synchronization settings
- PSA / Microsoft 365 Synchronization options
- Microsoft 365 Groups and Group Mapping (all new — see below)
To access these settings going forward, navigate to Clients, select a company, and open the Microsoft 365 tab. Make any changes and click Save Settings.
About Microsoft 365 Group Mappings (and Instructions)
Microsoft 365 Group Mapping lets Partners connect existing M365 security groups directly to CloudRadial Security Roles. When a user belongs to a mapped group, they automatically receive the corresponding role in the portal with no manual assignment required.
This feature is optional but is especially useful for Partners who already maintain structured M365 groups within their client organizations and want those groups to drive portal permissions automatically.
Before you begin:
- Microsoft 365 must be connected to the company via the Administrative Access Application
- At least one sync must be completed before groups will appear in the mapping interface
Step 1: Initiate a Sync
To initiate a sync with M365 groups:
- Navigate to Partner > Clients
- Select the company that you wish to map
- Open the Microsoft 365 tab.
- If no groups have been synced yet, you will see a message indicating this.
- Click Sync Now to pull in the M365 groups from that tenant.
Step 2: Review Synced Groups
After syncing, the Microsoft 365 Groups table will populate with all groups from the tenant.
- Note: If you don't see the groups, click the table refresh (two arrows circling each other) to update the table without reloading the page.
The Roles Assigned column will show 0 for each group until mappings are created.
Note that this process is ultimately manual - you will need to map each M365 group per company to their respective roles. You do not need to map every single M365 group to a role - just the ones you want to keep automated in their association.
Step 3: Map a Group to Roles
Click any group row to open the Map Roles to M365 Group dialog. From here, select one or more CloudRadial Security Roles to assign to members of that group and click Save.
Step 4: Confirm the Mapping
The Roles Assigned count updates in the groups table. Mappings also appear under Partner > Settings > Role Assignments, where they can be filtered by Type: M365 Group.
Managing and Removing Mappings
Partners have two options for removing a Group Mapping:
- Open the group from the Microsoft 365 tab, uncheck the roles to remove, and save
- Navigate to Partner > Settings > Role Assignments, filter by Type: M365 Group, and delete the relevant assignment rows
Both methods stay in sync. A change in one will reflect in the other.
Frequently Asked Questions
Can I give Partner-level roles via the M365 group mappings? No. For security purposes, no Partner-level permission roles can be given via the mapping assignments.
Do my existing M365 settings get affected? No. All existing sync configurations carry over automatically. Nothing needs to be reconfigured.
When do role assignments take effect after mapping? Immediately. Any user already synced in the portal will receive the mapped role as soon as the mapping is saved, no re-sync required.
What happens when a new user is added to an M365 group in Microsoft? Microsoft can take up to one hour for group membership changes to propagate. After that window, a re-sync with Microsoft 365 is required in CloudRadial, either manually via Sync Now or automatically via the overnight sync.
What if a user is removed from an M365 group? Same process as above. Once Microsoft propagates the removal (up to one hour), a CloudRadial re-sync will remove that user from the mapped role.
Is Group Mapping required? No. It is entirely optional. Role assignments can still be managed manually through Partner > Settings > Role Assignments as before. This is intended to give Partners even more flexibility in their role assignment process.
Can one M365 group be mapped to multiple roles? Yes. The mapping dialog allows multiple roles to be selected for a single group.
Can the same role be mapped to multiple M365 groups? Yes. Multiple groups can independently map to the same role.
Comments
0 comments
Article is closed for comments.