How to enable Profile information from Office 365 when syncing Onsite Active Directory

%3CLINGO-SUB%20id%3D%22lingo-sub-300885%22%20slang%3D%22en-US%22%3EHow%20to%20enable%20Profile%20information%20from%20Office%20365%20when%20syncing%20Onsite%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300885%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20we%20have%20moved%20to%20Office%20365%20and%20SharePoint%20online.%20I'm%20creating%20some%20PowerApps%20and%20one%20of%20the%20connectors%20is%20the%20Office365Users%20which%20allows%20you%20to%20connect%20to%20Profile%20data.%20However%2C%20as%20we%20sync%20Active%20Directory%20there%20are%20many%20things%20that%20you%20can't%20update%20around%20a%20user's%20profile.%20For%20example%20if%20a%20user%20changes%20jobs%20we%20can't%20update%20the%20Job%20Title%20from%20Delve%2C%20nor%20can%20we%20see%20Department%20or%20Reports%20To%20information.%20Is%20there%20a%20way%20to%20add%20this%20to%20Delve%3F%20We%20outsource%20our%20Network%20management%20and%20presently%20to%20change%20something%20like%20a%20Job%20Title%20or%20Department%20we%20need%20them%20to%20do%20it%20in%20Active%20Directory.%20Is%20there%20a%20way%20around%20this%3F%20Can%20you%20add%20Profile%20data%20to%20Delve%2C%20then%20pull%20it%20from%20there%20using%20an%20PowerApp%20connector%3F%20We%20only%20sync%20AD%2C%20that%20is%2C%20we%20do%20not%20have%20an%20on-prem%20Exchange%20Server%2C%20all%20our%20email%20is%20handled%20by%20Office%20365.%20Our%20organization%20deals%20is%20bound%20by%20HIPAA%20rules%20and%20so%20two%20way%20syncing%20raises%20some%20concerns.%20As%20we're%20using%20Office%20365%20and%20not%20syncing%20Exchange%2C%20it%20would%20be%20nice%20to%20find%20a%20way%20to%20update%20Job%20and%20Department%20via%20Delve%20or%20via%20Office%20365%20Admin.%20Thank%20you!%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301486%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20How%20to%20enable%20Profile%20information%20from%20Office%20365%20when%20syncing%20Onsite%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301486%22%20slang%3D%22en-US%22%3EThank%20you%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301450%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20How%20to%20enable%20Profile%20information%20from%20Office%20365%20when%20syncing%20Onsite%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301450%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%2C%20I%20just%20started%20using%20PowerApps%20and%20it%20relies%20on%20a%20lot%20of%20data%20in%20the%20profile%2C%20our%20AD%20team%20doesn't%20quite%20keep%20all%20that%20updated%20or%20is%20slow%20to%20get%20it%20updated!%20Missing%20pieces%20are%20Job%20Title%2C%20Department%2C%20Reports%20To%2C%20and%20a%20few%20other%20data%20points%20in%20the%20graph%20that%20I'd%20like%20to%20pull%20from.%20I%20thought%20of%20using%20a%20SP%20list%20but%20just%20thought%20if%20we%20could%20update%20Job%20Title%2C%20Department%2C%20and%20maybe%20Reports%20To%2C%20it%20would%20be%20nice!%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301142%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20enable%20Profile%20information%20from%20Office%20365%20when%20syncing%20Onsite%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301142%22%20slang%3D%22en-US%22%3ECheck%20into%20hyperfish.%20It%E2%80%99s%20greAt%20for%20profile%20updates%20and%20photo%20updates%20to%20your%20onprem%20and%20it%20syncs%20and%20also%20updates%20365%20locations%20directly%20for%20photos%20etc.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301069%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20enable%20Profile%20information%20from%20Office%20365%20when%20syncing%20Onsite%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301069%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301033%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20enable%20Profile%20information%20from%20Office%20365%20when%20syncing%20Onsite%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301033%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20John%2C%3CBR%20%2F%3E%3CBR%20%2F%3EUnfortunately%20there%20isn't%20a%20way%20around%20this.%20Azure%20AD%20Connect%20syncs%20the%20following%20attributes%20from%20your%20AD%20to%20Azure%20AD%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fhybrid%2Freference-connect-sync-attributes-synchronized%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fhybrid%2Freference-connect-sync-attributes-synchronized%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EWith%20Azure%20AD%20Connect%20your%20AD%2C%20not%20Office%20365%20is%20used%20to%20manage%20identities.%20Was%20there%20any%20reason%20you%20had%20your%20local%20AD%20synchronised%3F%20Do%20you%20still%20have%20things%20like%20local%20file%20servers%20or%20applications%20on%20premise%20connecting%20to%20your%20local%20domain%3F%20If%20you%20want%20to%20self%20manage%20the%20user%20identities%20and%20attributes%20such%20as%20job%20title%20and%20department%20then%20you%20would%20need%20to%20remove%20Azure%20AD%20Connect%20and%20then%2C%20as%20cloud%20users%20(as%20opposed%20to%20synchronised%20users)%2C%20you%20would%20manage%20the%20attributes%20through%20Office%20365%20admin%20centre%20or%20Azure%20AD.%3CBR%20%2F%3E%3CBR%20%2F%3EHowever%2C%20I%20do%20want%20to%20add%20a%20caveat%20here%20is%20that%20it%20is%20largely%20dependent%20on%20your%20situation%20-%20if%20you%20still%20want%20single%20sign%20on%20between%20office%20365%20and%20your%20local%20applications%20which%20connect%20to%20AD%20then%20you%20would%20continue%20as%20you%20are%20and%20potentially%20look%20to%20self%20manage%20changes%20on%20the%20local%20AD.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20question!%20If%20it%20has%2C%20please%20like%20and%20set%20as%20the%20solution.%20If%20not%2C%20happy%20to%20answer%20any%20further%20questions%20you%20have%20on%20it.%20Thanks%20for%20raising%20this%20to%20the%20community.%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301023%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20How%20to%20enable%20Profile%20information%20from%20Office%20365%20when%20syncing%20Onsite%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301023%22%20slang%3D%22en-US%22%3EYou%20can%20write%20in%20the%20SPO%20user%20profiles%20using%20SPO%20REST%20API%20but%20the%20question%20here%20is%20if%20this%20is%20really%20what%20you%20want%20to%20do...I'm%20asking%20here%20because%20bearing%20in%20mind%20the%20local%20AD%20is%20your%20source%20of%20authority%20in%20regards%20of%20user%20identities%2C%20It's%20quite%20natural%20to%20update%20user%20properties%20there%20and%20sync%20to%20Office%20365%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-300960%22%20slang%3D%22en-US%22%3ERE%3A%20How%20to%20enable%20Profile%20information%20from%20Office%20365%20when%20syncing%20Onsite%20Active%20Directory%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300960%22%20slang%3D%22en-US%22%3EI'm%20moving%20your%20question%20to%20the%20Office%20365%20space%20for%20better%20visibility.%3C%2FLINGO-BODY%3E
Highlighted
Deleted
Not applicable

Hi, we have moved to Office 365 and SharePoint online. I'm creating some PowerApps and one of the connectors is the Office365Users which allows you to connect to Profile data. However, as we sync Active Directory there are many things that you can't update around a user's profile. For example if a user changes jobs we can't update the Job Title from Delve, nor can we see Department or Reports To information. Is there a way to add this to Delve? We outsource our Network management and presently to change something like a Job Title or Department we need them to do it in Active Directory. Is there a way around this? Can you add Profile data to Delve, then pull it from there using an PowerApp connector? We only sync AD, that is, we do not have an on-prem Exchange Server, all our email is handled by Office 365. Our organization deals is bound by HIPAA rules and so two way syncing raises some concerns. As we're using Office 365 and not syncing Exchange, it would be nice to find a way to update Job and Department via Delve or via Office 365 Admin. Thank you!   

7 Replies
Highlighted
I'm moving your question to the Office 365 space for better visibility.
Highlighted
You can write in the SPO user profiles using SPO REST API but the question here is if this is really what you want to do...I'm asking here because bearing in mind the local AD is your source of authority in regards of user identities, It's quite natural to update user properties there and sync to Office 365
Highlighted

Hi John,

Unfortunately there isn't a way around this. Azure AD Connect syncs the following attributes from your AD to Azure AD

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-sync-attributes-syn...

With Azure AD Connect your AD, not Office 365 is used to manage identities. Was there any reason you had your local AD synchronised? Do you still have things like local file servers or applications on premise connecting to your local domain? If you want to self manage the user identities and attributes such as job title and department then you would need to remove Azure AD Connect and then, as cloud users (as opposed to synchronised users), you would manage the attributes through Office 365 admin centre or Azure AD.

However, I do want to add a caveat here is that it is largely dependent on your situation - if you still want single sign on between office 365 and your local applications which connect to AD then you would continue as you are and potentially look to self manage changes on the local AD.

Hope that answers your question! If it has, please like and set as the solution. If not, happy to answer any further questions you have on it. Thanks for raising this to the community.

Best, Chris

Highlighted
Highlighted
Check into hyperfish. It’s greAt for profile updates and photo updates to your onprem and it syncs and also updates 365 locations directly for photos etc.
Highlighted

Thanks, I just started using PowerApps and it relies on a lot of data in the profile, our AD team doesn't quite keep all that updated or is slow to get it updated! Missing pieces are Job Title, Department, Reports To, and a few other data points in the graph that I'd like to pull from. I thought of using a SP list but just thought if we could update Job Title, Department, and maybe Reports To, it would be nice! 

Thanks 

Highlighted