key:userPrincipalName=WorkerID

Defines the unique key used to match and update existing Assets objects. In this example, Entra ID userPrincipalName maps to the Assets text attribute WorkerID.

map:userPrincipalName=Atlassian Account ID

Maps userPrincipalName to an Assets attribute of type User. OnLink uses the value to look up the matching Atlassian user.

map:usageLocation=Usage Location

Maps a Microsoft Graph user property to an Assets attribute. Any supported string, boolean, or date property can be used as a source field. See the Microsoft Graph user properties reference: https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0#properties

Common source fields include companyName, country, department, displayName, employeeHireDate, employeeType, givenName, jobTitle, mailNickname, mobilePhone, officeLocation, preferredName, surname, and userPrincipalName.

map:businessPhones.0=Business Phone

Maps the first value in the Entra ID businessPhones collection. Although this property is a string collection, Entra ID supports only one phone number for this field, so use businessPhones.0.

map:CostCenterEmployeeOrg=Department|Name=${CostCenterEmployeeOrg}

Maps the employee cost center from Entra ID to the Assets Department reference attribute. The referenced object is looked up by Name.

map:DivisionEmployeeOrg=Division|Name=${DivisionEmployeeOrg}

Maps the employee division from Entra ID to the Assets Division reference attribute. The referenced object is looked up by Name.

map:EmployeeManager=ManagerObject|WorkerID=${EmployeeManager}

EmployeeManager is an OnLink-provided property that returns the user manager ID. In this example, ManagerObject is a self-referencing Assets object attribute that points back to the same user object type.

Open

To enable manager expansion, add config:expand=manager. Because the Entra ID API does not support filters when exporting managers, create a separate import job for manager relationships when possible.

Set config:data_limit higher than the employee count so manager data is fully returned.

config:export_azure_groups=true

Exports all Entra ID groups assigned to each user. Before enabling this setting, create an Assets schema named Azure Groups with these text attributes: Group Display Name, Group Description, and Group ID.

Open

Also add an Azure Groups reference attribute to the user object type. This attribute must point to the Azure Groups object type.

Open

config:export_azure_licenses=true

Exports all licenses assigned to each user. Before enabling this setting, create an Assets schema named Azure Licenses with these text attributes: License ID, License SKU Part Number, and License SKU ID.

Open

config:filter=country eq 'United States'

Optionally limits the imported users by using a Microsoft Graph filter expression. Any valid Microsoft Graph filter expression can be used.

To pull User of type Member
config:filter=userType eq 'Member'

To remove users with email that starts with test
config:filter=not(startswith(mail,'test'))

To remove users with display name that starts with test config:filter=not(startswith(displayName,'test'))

To pull users if company name is present
config:filter=companyName ne null

To pull only employees

config:filter=employeeType eq 'Employee'

map:signInActivity.lastSuccessfulSignInDateTime=Last Logon

Maps sign-in activity fields, such as:

• signInActivity.lastSignInDateTime

• signInActivity.lastSignInRequestId

• signInActivity.lastNonInteractiveSignInDateTime

• signInActivity.lastNonInteractiveSignInRequestId

• signInActivity.lastSuccessfulSignInDateTime

• signInActivity.lastSuccessfulSignInRequestId

To fetch these fields, grant the OnLink app AuditLog.Read.All permission in Entra ID.

config:data_limit=100

Optionally limits the number of users imported from Entra ID. Use this setting for initial testing or validation.

config:api=groups

Overrides the default users API. For example, use config:api=groups to import all Entra ID groups into Assets.