SCIM Error: Cannot Find Entity 'role'

Issue

Microsoft Entra ID SCIM provisioning fails when provisioning users to Fivetran. The following error appears:

Cannot find entity 'role' with name '...'

Environment

• Account settings
• SCIM
• Identity provider: Microsoft Entra ID

Resolution

To resolve this issue, update the role attribute mapping in Microsoft Entra ID:

1. Open the SCIM provisioning attribute mappings for the Fivetran application.
2. Locate the roles[primary eq "True"].value attribute mapping.
3. Replace the unsupported role value with one of the following supported values, which are case-sensitive:
   • account_administrator
   • account_analyst
   • account_billing
   • account_reviewer
   • destination_creator
   The Display name can remain the human-readable Fivetran role name, such as Account Administrator, but the Value field must use lowercase with underscores, such as account_administrator.

4. Re-run provisioning.

For more information, see Add roles to the application and Customize user provisioning attribute mappings.

Cause

This issue occurs when Microsoft Entra ID sends an unsupported role value during SCIM provisioning. The Fivetran SCIM API only accepts specific account-level role values, and they are case-sensitive. When the roles[primary eq "True"].value attribute mapping sends a value that doesn't match a supported role, we reject the request.