I’m afraid not. It’s a running requirement. We have multiple companies. Each with a realm of their own. Partial sync is not really usable for the seperation of companies. Even if ApplyPermission worked, stamping permissions on each and every object instance is not the way forward
So I’m stuck with full sync, where Azure needs to be able to create realms and users.
I’ll code around the current issues by making a conversion table between our company numbers and userid’s.
Thanks for your efforts. They are much appreciated. And please still ping me when the SSL fix arrives.