I'm a developer with limited Entra ID experience. A client currently imports users and departments from on-premises Active Directory by traversing every Organizational Unit and its users, then recreating that structure in a website. They want to move the integration to Entra ID using Microsoft Graph, but Entra ID doesn't provide the same tree-like OU structure. I've considered using each user's department attribute, but that seems error-prone. I've also seen the on-premises distinguished name mentioned as a possible way to identify a user's original OU. Does that value change when a user is moved to another OU, and what is the recommended way to represent or traverse this hierarchy in Entra ID?
1 Answer
Rather than trying to reproduce the OU tree, use attributes that are synchronized from your authoritative directory, assuming they’re maintained consistently. Another option is to create groups that represent the organizational hierarchy—for example, Directorate, Department, Unit, and Team—and have the website consume those group memberships through Microsoft Graph.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures