'Section display names are always synced' not working ?

Question

Hi everyone.&nbsp;I've just wasted an hour of my life crosschecking data sources and SDS logs as one group has been reported AWOL.&nbsp; Eventually I found the missing group, and Azure Audit Logs show me it was renamed by a Group Owner to something nonsensical.&nbsp;Our Sync Profile has this setting - but it doesn't seem to work as advertised:Sync Option for section group display name: Section display names are always synced.&nbsp;Should that option work ?&nbsp; can you direct me at any Azure/CloudAppSecurity Audit logs which could point to a rename failure ?&nbsp;We are synchronising via Flow, if that makes a difference?&nbsp;Thanks in advanceMartin Christopher&nbsp;

bigal06 · Answer

Currently have the same issue with teachers changing names and have the settings set as described.. Have opened a case with Microsoft and was instructed to press 'Reset Sync' in profile then it will work from then on. Whilst it did fix this with the reset sync the teachers renamed the section names again and after the upload of CSV it still didn't overwrite. Looks like that option doesn't work! I looked in the Azure audit logs and can see who changed the group names but still trying to establish why SDS doesn't overwrite as mentioned in the profile option!

The advice so far is:

You can check the audit logs for those groups to see when that group name changed.

SDS uses "Microsoft.Azure.SyncFaric" to make changes in Azure AD look for that

You can also see the time stamp for when the owner changed the name of the group

Then just press reset sync to make the profile correct the group names and continue to upload the CSV files.

I am not sure where to find "Microsoft.Azure.SyncFaric" but have found the time stamps of the users who renamed the groups but as far as I can tell I have the options correct but the next upload of CSV doesn't overwrite as advertised.

iteken · Answer

Hi.Glad to hear it's not just me.FYI you can find Microsoft.Azure.SyncFabric activity easiest via the https://Portal.CloudAppsecurity.Com then Investigate -&gt; Activity Log.You can drill down there for either that user. or "Group Updated" activities.

bigal06 · Answer

Iteken&nbsp;Thanks - awaiting further response from Microsoft support regarding the option 'Section display names are always synced'&nbsp;&nbsp;

bigal06 · Answer

Response from Microsoft below:"I talked to the engineer and the sync profile is acting as expected. It will not update the group name if a teacher has changed it by just uploading another set of CSV files.engineer explanation:If the option is checked, it will prevent SDS from modifying the DisplayName when it syncs a section. If unchecked, then anytime SDS syncs a section, it will update that section to match the CSV (including DisplayName). SDS may not sync the section on a subsequent upload, if that section has not changed since the last upload (because it is only going to sync deltas)"&nbsp;So it appears to not do as it says unless the section name changes in the CSV because of the delta sync. Therefore the only way I can overwrite the section names back to default is to reset sync or modify the CSV which won't happen as it extracts from MIS system.

iteken · Answer

Thanks for following this up. While i understand their answer, it'd be helpful of the re-worded the UI to make this clear. I suspect it's not just the pair of us wondering why it's behaving like this.I wonder if a weekly "Reset Sync" is the way to go, and how i'd go about doing that.My instinct would be to look at the old PowerShell commandlets and try to extract a GraphAPI command set which will do a Saturday Sync, though if memory serves that will require a set of GlobalAdmin creds to be saved somewhere, which isn't great.

Forum Discussion

'Section display names are always synced' not working ?

8 Replies

Resources