Microsoft 365 (M365) Import Policy

Overview

The Microsoft 365 Import Policy in CyberQP allows IT admins to control which accounts are automatically imported from Microsoft 365 (Entra ID / Azure AD) environments. This policy ensures that only the right set of users/accounts are brought into CyberQP for management.

You can apply the policy to both end-user and administrator accounts for existing customers and set default policies for any new customers created in CyberQP. You will need to create a separate policy for each account Type (Administrators and End Users - however only 1 End User import policy SOURCE can be configured per Customer).

Prerequisites

• You must have the Super, Primary, or Manager role in CyberQP

• Microsoft 365 integration must be connected for the customer

Step-by-Step Guide

1. Go to Global Settings > Automatic Imports
 

2. Click + New Import Policy, then select Microsoft 365

3. Select Account Type
Choose whether you’re creating the policy for End-user Accounts or Administrator Accounts
Each policy is specific to one account type only

4. Enter Policy Name and Description
Give your policy a meaningful name and a short description for future reference

5. Set as Default (Optional)
Enable this option if you want all newly added customers to use this policy by default
Note: Only one default policy is allowed per account type

6. Assign Existing Customers
Select customers from the list who should immediately begin using this policy’s settings

7. Choose Import Criteria Based on Account Type

1. For End-user Accounts: 
   
   Chose the combination of Licensing and/or Entra Security Group Name.
   
   
   You can select both the toggle and the Group Based to import all users (regardless of license) from a Group.
    

2. For Administrator Accounts: Select Privileged Roles
   
   Choose from a predefined list of Microsoft 365 privileged roles such as:

• Global Administrator

• Privileged Role Administrator

• User Administrator

• Exchange Administrator

• Helpdesk Administrator

Accounts with any of the selected roles will be imported into CyberQP and treated as administrator accounts.