Import and Synchronize Users

You can add users to your MyQ Roger tenant in these ways.

• Add a user manually
  Go to MyQ Roger > Users > Create new user and define the user manually.

• Import from Excel / CSV
  To quickly add multiple users, you can import from an Excel or CSV file.

• Synchronize from Microsoft Entra ID
  To import and synchronize users at scale, set up synchronization from Microsoft Entra ID.

Most enterprise MyQ Roger deployments use Microsoft Entra ID to automatically provision and manage users. Synchronized users sign in with their Microsoft credentials.

Prerequisites in Microsoft Entra ID

Before configuring the connector, complete these steps in the Microsoft Azure portal:

1. Create an App Registration:

   • Go to portal.azure.com and navigate to Microsoft Entra ID > App registrations > New registration.

   • Note the Application (client) ID and Directory (tenant) ID.

2. Create a Client Secret:

   • In your App registration, go to Certificates & secrets > New client secret.

   • Copy the secret Value (this will not be displayed again).

3. Grant API Permissions:

   • Go to API permissions > Add a permission > Microsoft Graph > Application permissions.

   • Add User.Read.All and Group.Read.All.

   • Click Grant admin consent for your organization.

Entra ID application secrets must be rotated periodically. Set the Application secret expiration date parameter in MyQ Roger (below) to get notified when the secret is about to expire.

Configure the Connector in MyQ Roger

1. In MyQ Roger Server, go to Administration > User Synchronization.

2. Click Edit to show the configuration fields.

3. In Secrets, enter:

   • Application ID
     The Application (client) ID from your App registration.

   • Directory (Tenant) ID
     The Directory (tenant) ID from your App registration.

   • Application secret
     Add the application secret value you copied during the Microsoft Entra ID setup.

   • Application secret expiration date (Optional)
     Enter the expiration date for the application secret, and MyQ Roger will notify you when the secret is about to expire.

4. In Groups, configure group synchronize mode (None, Selected, From user attribute, All), and user synchronization mode (Selected groups, All).

5. Click Connect to verify the credentials.

Run the Initial Sync

1. Once connected, click Sync now to perform the initial synchronization.

2. After synchronization completes, go to Organization > Users to verify that users appear with the "ID synced" tag.

3. (Optional) Enable Synchronize automatically to run the sync operation once every 24 hours.

Synchronized users must use Sign in with Microsoft to log in to MyQ Roger Server, the Mobile App, and the Desktop Client.

Verify User Synchronization

View the status of user synchronization in Administration > User Synchronization, including synchronized users and groups, and last run information.

To view all users, in MyQ Roger Server go to Organization > Users. You can filter this view by users added via Entra ID (Azure AD) synchronization.