Entra User Import
Search Azure AD by name or email and bulk-import matching users as s3BEAR accounts in one
click. Imported users are linked by their Azure oid, so they get JWTs the moment they
sign in via SSO — no password to set, no email to send.
How to use
UI: Users → Import from Entra → search → select → import.
API:
# Search Entra for users matching "kemal"
curl "http://localhost:8200/api/v1/users/entra/search?q=kemal" \
-H "Authorization: Bearer $TOKEN"
# Import selected users
curl -X POST http://localhost:8200/api/v1/users/entra/import \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"azure_oids": ["abc-123-...", "def-456-..."]}'
Import requires Azure Entra credentials to be configured — see Authentication.
Use case: onboarding a new team
A new 8-person data team joins. Instead of asking each one to log in once so they appear
in the system, search "Data Team" in Entra, import all 8 at once, and drop them into the
Data Engineers group with permissions on data-* buckets. They have access before
their laptops are even unboxed.
Related: Authentication · Group Permissions
