Why does this integration have to be enabled separately?
This is an additional authentication step implemented to enhance the existing features as mentioned under the Integration benefits
Only the SDP admin who enabled the integration can disable it. The email address of the enabling admin will be displayed in the integration card.
Please note that this email ID belongs to the SDP admin profile, not the connected Azure profile.
Role's Required?

ServiceDesk Plus Cloud : SDAdmin with Organization Admin
Microsoft : Privileged Access Admin or Global Admin
Any account with Privileged Access Admin or Global Admin privileges can be used for authentication. It doesn’t necessarily have to be the user’s personal Microsoft account — even a service account can be used.
The Microsoft account used here is not linked to the one used in “Import from Azure.” Microsoft Azure integration follows an independent authentication process that requires a Privileged Access admin or Global Admin account.
Integration benefits?
This authentication is required for the following features:
- Syncing Microsoft Calendar events (if Microsoft Calendar integration is enabled)
- Importing additional user information in Import from Azure
- Ensure the option “Import users' department and site details” is checked on the Microsoft Azure configuration page
d. Syncing additional user details in Azure AD User Sync (if the Azure AD User Sync integration is enabled)
Scope of this Integration?
This authentication is organization-specific. Once enabled in one instance, it will be automatically enabled across all other instances within the organization. Similarly, disabling it in one instance will disable it in all instances.