Skip to main content

How do I assign roles to users with Microsoft Entra ID (formerly Azure Active Directory)?

Updated

Please note that Single Sign-On (SSO) is exclusively available as an add-on feature on the Enterprise plan. For further information, please refer to the Storyblok Pricing page or fill out this form, and one of our sales specialists can explain how Storyblok can support your business needs.

When using SSO with Microsoft Entra ID (formerly Azure Active Directory), you can assign roles to users in your Space. Custom permissions allow you to define what a user can do in a space.

Create a role with custom permissions

  1. Log in to your Storyblok account and access your Space
  2. Navigate to Settings > Roles
  3. Click on the Add new role button
  4. Enter the name of the role you want to create into the input under Role name. You can also provide a short description for it
  5. Define permissions for the new role from the five tabs available:
    • General
    • Content
    • Blocks
    • Datasources
    • Assets
  6. Click the Save button

Once the new role has been created, locate and copy the ID of your Microsoft Entra ID directory group.

Enable SSO for the new role

  1. Return to the Roles area in your Space
  2. Click on the Custom Role you just created.
  3. Click the box next to "This role is for integration with SSO"; a check mark should appear to indicate it has been enabled.
  4. Paste the ID of your Microsoft Entra ID directory group into the input box under External ID (Used for SSO)
  5. Click the Save button.

Use a predefined role instead

If you do not wish to assign custom permissions, once you access the Roles area, click the Add new role button and follow these steps:

  1. Enter the name of the role you want to create into the input under Role name. You can also provide a short description for it.
  2. Click the box next to "This role is for integration with SSO"; a check mark should appear to indicate it has been enabled.
  3. Paste the ID of your Microsoft Entra ID directory group into the input box under External ID (Used for SSO)
  4. Choose from one of the two predefined roles available by clicking the box next to them:
    • Act as admin: Can manage users, create and update projects.
    • Act as editor: Can create, update, and delete content.
  5. Click the Save button.

Related articles