FAQs
This Frequently Asked Questions (FAQs) section provides answers to the most commonly asked questions about Microsoft Entra ID connector in Identity Security Cloud (ISC).
What are the key factors to consider when deciding between Full Aggregation and Delta Aggregation in ISC?
Answer:
Full Aggregation retrieves all records from the source and evaluates them for changes. This approach is efficient for bulk data loads, as it fetches all users in large pages, with each response containing complete user details.
Delta Aggregation is an aggregation method that only loads data that has changed, been added, or been removed from the source. It uses a delta token to fetch only the modified users and then retrieves their details in small batches (for example, 15 at a time). However, not all connector support Delta Aggregation.
Performance Considerations
If both methods take a similar amount of time (approximately 4 hours for 4,000–6,000 users), Full Aggregation is preferable, as it ensures all records are evaluated for changes.
If only a small subset of users has changed (for example, around 1,000 users, taking about 30 minutes), and the source supports Delta Aggregation, this method is more efficient, as it only processes the modified data.
Use Full Aggregation for large changes or when the connector does not support Delta Aggregation. Use Delta Aggregation for fewer changes and when the connector supports it, as it can significantly reduce the processing time and API calls required.