The Apply step in TeamDirectory allows administrators to finalize changes to directory data, either by writing them directly to Microsoft Entra or by exporting the changes for manual application. This stage ensures that only approved changes are applied and provides flexibility for organizations with different data management preferences.
If TeamDirectory has been granted the appropriate scopes, such as User.ReadWrite.All, and the administrator has the necessary Azure Role (e.g., User Administrator), changes can be applied directly to Microsoft Entra. This allows for real-time updates to the directory data within your organization's Microsoft ecosystem.
This level of security requires explicit configuration, ensuring that both the system and the admin are authorized to make changes at the Azure level.
In cases where the customer does not want TeamDirectory to make changes directly, the Fix Manually option generates a PowerShell script that contains the necessary commands to update the directory. This script can be executed by a person with the appropriate permissions, ensuring changes are made in a controlled and secure manner.
The Powershell script uses Microsoft Graph PowerShell and generates the appropriate list of commands to make the changes within Entra via Microsoft Graph.
For customers who rely on a different back-office system as the "Source of Truth," the changes can be exported as a CSV file. This file can be used internally to update your systems, and once Microsoft Entra is updated by the customer, the changes will flow back into TeamDirectory. This option provides flexibility for organizations with complex data management workflows.
The Include all directory users checkbox allows you to export the full directory or only people with changed values.