Groups offer an easier way to manage provisioning and deprovisioning in Entra ID. This guide will run you through the step-by-step set up for creating Entra ID groups for the editor and viewer roles in Soulanma.
For an overview of how Soulanma supports SCIM, check out this article.
Create two groups in the Entra admin center, called Soulanma Viewers and Soulanma Editors:

Add users to the correct group as members.
Open Soulanma under App registrations:

Click Create app role to create two app roles, with the following information:
Display name | Value | Description |
|---|---|---|
Editor | editor | Editors can create and edit files in Soulanma. |
Viewer | viewer | Viewers can read and comment on files in Soulanma, but cannot edit existing content, or create new files. |

Still in Entra ID, go to Users and groups in the Soulanma app under Enterprise applications.
Add the Soulanma Editors group and assign it the role of Editor.
Add the Soulanma Viewers group and assign it the role of Viewer.
You should see this setup:

Now, go to Provisioning in the Soulanma app under Enterprise applications, and click Edit attribute mappings:

Open Mappings and click Provision Microsoft Entra ID Users:

Click Add New Mapping:

Create a new attribute with the following settings:
Switch(SingleAppRoleAssignment([appRoleAssignments]), , "Editors", "true", "Viewers", "false")urn:ietf:params:scim:schemas:extension:Soulanma:2.0:User:editorImportant: In the expression above, it is crucial that “Editors” and “Viewers” match the Display name, not the Value that you configured for the App role.
You can now enable SCIM provisioning.
If you already have SCIM provisioning enabled, wait for the next refresh (max 40 minutes), or you can click Stop provisioning and Start provisioning to make it run immediately.