After you have published the EmpowerID SCIM microservice app to Azure, you need to return to Azure and assign the SCIM App service root level permissions for the Tenant Root Group.
These steps ensure that EmpowerID has the appropriate authentication and access to read and write the user information for your Azure tenant.
Assign the App service root level permissions for the Tenant Root Group
In Azure navigate to Management groups.
Click the details link beside Tenant Root Group.
On the tenant root page, click Access Control (IAM) in the sidebar.
On the Access Control (IAM) page, click Add and then select Add role assignment.
In the Add role assignment pane that appears, click Select a role and then select Owner.
Search for and select the App service you deployed to the tenant.
Save the role assignment.
IN THIS ARTICLE