# How to get started?

{% hint style="warning" %}
**Requirements:**&#x20;

Microsoft Entra ID (formerly known as Azure Active Directory)

* *For hybrid setups: You’ll also need to complete* [*Step 3 - Hybrid setup - Active Directory*](#optional-step-3-hybrid-setup-active-directory)
  {% endhint %}

ServiceChanger provides a streamlined and user-friendly method for connecting to your Microsoft Entra ID tenant via [OAuth2](https://learn.microsoft.com/en-us/entra/architecture/auth-oauth2). Through our intuitive onboarding screen, all you need to do is input your Entra Tenant ID and grant admin consent – it's that easy.

## Step 1: Azure Entra ID

1. Open [portal.azure.com](https://portal.azure.com), sign in and navigate towards Microsoft Entra ID.
2. Copy your (Entra) Tenant ID

<figure><img src="https://1332728329-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlMTU9Uyx5cjbGdcEsR3N%2Fuploads%2F2hf3N0zV2T3XuHpTpVb9%2F2024_02_09_20_22_43_Default_Directory_Microsoft_Azure.png?alt=media&#x26;token=2b718197-8744-4561-9ada-6b0a909558a3" alt=""><figcaption></figcaption></figure>

## Step 2: ServiceChanger.com

3. Go to the onboarding link you received in your mailbox after completing the '[start free trial](https://servicechanger.com/en#pricing)' process
4. Paste your (Entra) Tenant ID
5. Submit
6. Grant permission by logging in with an **Global Administrator account**

<figure><img src="https://1332728329-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlMTU9Uyx5cjbGdcEsR3N%2Fuploads%2FcnAwkdBwYmHVE1JGTwMz%2F2024-02-09%2020_33_15-Service%20Changer%20-%20Saas%20Dashboard%20%E2%80%93%20Figma.png?alt=media&#x26;token=61c6ee01-d1cf-4b90-a270-a540e8d56889" alt=""><figcaption></figcaption></figure>

7. After that, your [app](https://app.servicechanger.com/en) will start synchronizing the users, groups, and user-group relations from your Entra ID Tenant. This may take a few minutes.&#x20;

{% hint style="info" %}
Grant operators access rights to ServiceChanger can be found on the [Microsoft Entra ID integration page](https://servicechanger.gitbook.io/servicechanger.com/general/microsoft-entra-id).
{% endhint %}

8. Once that's done, you're ready to start creating your Attribute-Based Access Control (ABAC) model. We really suggest getting the hang of the [basics of the tool](https://servicechanger.gitbook.io/servicechanger.com/getting-started/learn-the-basics) first.

## (Optional) Step 3: Hybrid Setup - Active Directory&#x20;

To review your current state of transformation, [click here](https://learn.microsoft.com/en-us/entra/architecture/road-to-the-cloud-posture)

{% hint style="warning" %}
**Requirements:**&#x20;

Ensure the following prerequisites are met before proceeding:

* User, Group, and Membership information must be accessible (at minimum, **read-only**) in Microsoft Entra ID.\\

Additionally, confirm that these components are set up:

* Hybrid Worker(s)
* Microsoft Entra Connect *(or AD Connect)*
* Automation Account (Runbooks) in Azure
  {% endhint %}

Many companies still utilize Active Directory (AD) as their primary source for identity and access management, with changes synchronized to Entra ID. ServiceChanger seamlessly supports managing these environments simultaneously.

**How Does It Work?**\
ServiceChanger directly reads from Entra ID, not from Active Directory. However, updates made within ServiceChanger are exposed through the [ServiceChanger API](https://servicechanger.gitbook.io/servicechanger.com/general/api-documentation), allowing you to reflect these updates back into your Active Directory environment.

**How to Set This Up?**

1. Start with Steps 1 & 2 to ensure Entra ID is properly connected and in sync.
2. Set up your runbook to fetch delta changes from the [ServiceChanger API](https://servicechanger.gitbook.io/servicechanger.com/general/api-documentation) and apply them to your local Active Directory.

{% hint style="success" %}
To make things easier, we’ve also [pre-created a membership runbook](https://servicechanger.gitbook.io/servicechanger.com/general/api-documentation/example-membership-runbook) for you. It’s optional but available if needed.
{% endhint %}
