Do I need to do anything to update Cloud Sync to new versions?

No, you don’t need to do anything to update Cloud Sync. It updates automatically along with its dependencies. The Loader script downloads the necessary code and dependencies from the URL specified within the script, ensuring that you always have the latest version.

How can I assess the permissions that Cloud Sync has?

Cloud Sync utilizes a System Managed Identity to access Exchange Online with read permissions. You can review these permissions in the Azure Portal:

Exchange.ManageAsApp permission:

• Navigate to Enterprise Applications.

• Deselect the filter called Enterprise Applications.

• Open the principal called ZivverCloudSync.

• Under Permissions, you will find the API permission details.

Global Reader role:

• Go to Entra ID Roles and Administrators.

• Search for the Global Reader role.

• You will see that ZivverCloudSync is assigned to this role.

Do I need to keep the Microsoft Graph Command Line Tools after setting up the account?

No, you can remove the Microsoft Graph Command Line Tools once the initial setup is complete. To do so, go to the Azure Portal, navigate to Enterprise Applications, and delete or edit the Microsoft Graph Command Line Tools.

Can I add other administrators to the Automation Account?

Yes, you can add other administrators to the Automation Account. Simply navigate to the IAM section of the Automation Account and assign the Contributor role to the additional administrators.

Can I change how often Cloud Sync runs?

Yes, you can change the frequency of Cloud Sync runs. Go to the Schedules section in your Automation Account and adjust the schedule according to your needs.

What are the costs in Azure associated with Cloud Sync?

The cost of using Cloud Sync varies based on your organization’s size, which affects how long each run takes. Microsoft provides the first 500 minutes of Cloud Sync per month for free. To reduce costs, consider adjusting the schedule to run Cloud Sync less frequently.

In what region is the Automation Account created and can this be changed?

By default, the Automation Account is created in the West Europe region. However, you can change this by modifying the setup script before executing it.

Can I receive email reports about Cloud Sync runs?

Currently, email reports are not automatically included with Cloud Sync. If you need email notifications, you can set up an alert in the Automation Account. Please be aware that there may be additional costs associated with setting up alerts.

Can the Zivver support team view logs from my Cloud Sync setup?

Yes, Zivver receives telemetry from every Cloud Sync run. Any sensitive variables such as tokens or API keys are masked in the telemetry. This option can be disabled by adding a boolean variable called CLOUD_SYNC__TELEMETRY and setting its value to False.

Can I select one of my multiple subscriptions in Azure?

Yes, the setup script contains some lines that allow you to provide the ID of one of your subscriptions. You can copy the subscription ID in the Azure tenant under Subscriptions

Why do I need to add the ‘allow_large_sync’ parameter at the first synchronisation?

Cloud Sync does not perform syncs with large delta’s without specific confirmation to prevent unintended account suspension at large scale. The allow_large_sync parameter is required to create, update or suspend more than 10 % of your current total accounts in Zivver.

What groups are supported in the Source Filter?

The Group Filter makes use of the Graph API to get groups and their members. Currently, the Graph API supports the following groups:

• Microsoft 365 (unified) groups
• Security groups (assigned or dynamic)
• Mail-enabled security groups
• Distribution groups

Nested groups are not supported in the Cloud Sync Source Filter. If you have a group with members inside the group that you use in the Source Filter, then members inside the nested group are not synchronised.