Resources / Integrations / Microsoft 365 / Entra ID directory

Microsoft 365 / Entra ID directory

Read-only user directory sync from Microsoft Entra ID through an admin-consented OAuth connection.

Last verified against our product: October 4, 2026

Availability

Available in the admin console

How an admin connects it

OAuth Connect button with admin consent. Work and school accounts only.

Who can set it up: Organization admin (a Microsoft admin account able to grant admin consent is required).

  1. In the Mucho Gusto admin console, open the Microsoft 365 card and click Connect.
  2. Sign in with a Microsoft work account and grant the read-only consent.
  3. You are returned to the admin console. Pick who to invite and import the org chart.

Permissions requested

Permission or scopeWhat it allows
User.ReadSign in the approving admin and read their own profile.
User.Read.AllRead basic profiles of all users in the directory (delegated, requires admin consent).
openidStandard sign-in.
emailStandard sign-in.
offline_accessKeep the connection alive with a refresh token.

Data we read

Read

  • Display name
  • Mail (falling back to user principal name)
  • Job title
  • Manager (mail of the user's manager)
  • Account-enabled flag

Not read

  • Mailboxes, calendars, files or chats
  • Phone numbers and addresses
  • Group membership
  • Disabled accounts (skipped)

The request names these fields explicitly. We also read your organization's name and default verified domain at connect time. This source supplies no hire or termination dates to us, so it gives no tenure data.

How the data is used

  • Seeds the org chart with titles and reporting lines.
  • Lets an admin choose which directory people to invite.
  • A manager you have set by hand is never overwritten by a sync.

Sync frequency

Automatically once a day (04:00 UTC), plus on demand with the admin console's sync button.

Disconnecting and purging data

How: Admin console, Microsoft 365 card, Disconnect.

  • Our stored connection (admin account, directory tenant and refresh token) is deleted.
  • Nightly syncs stop.
  • Also remove the Mucho Gusto enterprise application in your Entra admin center to revoke consent.

What remains: Disconnecting removes the stored connection only. Org-chart entries, titles, reporting lines and employment dates already imported stay in your organization's workspace, and member accounts are not deleted. To have previously synced data removed as well, email [email protected] and we will handle it case by case; there is no self-service purge today.

Back to all integrations

Questions or a correction? [email protected]. See also: Security, Subprocessors, Privacy, Terms.