Directory Context

Attach department, office, and group context to traces by granting Velatir admin consent in Microsoft Entra

Velatir for Desktop can attach organisational context to every trace: the person’s department, office, and group memberships. This routes activity to the right workspace and keeps your team-level insights accurate. End users see nothing; there is no prompt and no per-user setup.

On Microsoft Entra this needs a one-time admin consent, so Velatir can read directory profiles. Without it, traces are still captured; they simply carry no directory context.

Grant admin consent

1. As a Microsoft Entra administrator, open this URL in your tenant:

   https://login.microsoftonline.com/organizations/v2.0/adminconsent?client_id=ddddc2f1-9b3e-4ca2-99bf-99cbae699402&scope=https://graph.microsoft.com/.default&redirect_uri=https://docs.velatir.com/setup/directory-context
   

2. Sign in and review the request. It asks for one read-only permission, Sign in and read user profile (User.Read):

   Field	Value
   Application	Velatir LDAP host
   Publisher	ldap.velatir.com
   Permission	Sign in and read user profile (User.Read)

   Select Consent on behalf of your organisation and accept.

3. The app now appears under Entra → Enterprise applications → Velatir LDAP host. Open it there to confirm admin consent is granted (use Grant admin consent for [your organisation] if it is not). You can review the permission, see sign-in activity, or revoke access from the same place at any time.

That is the whole setup. Directory context starts flowing once consent is granted.

For on-premise Active Directory without Entra, this step is not required: Velatir reads directory details locally. For hybrid setups, grant consent anyway so context still resolves when people work off the corporate network.

Other directory attributes

Workspaces can follow properties beyond department and office, such as city, country or region, or company name. See Microsoft Entra.

Structure kept in extension attributes

Some organisations keep their structure in on-premises Active Directory extension attributes (for example extensionAttribute9), synced to Entra with Entra Connect. Velatir can read these, both through Entra and directly from on-premises Active Directory. The same read-only consent covers it. Contact support to map them to your workspaces.

Devices on the corporate network

Domain-joined Windows devices on the corporate network read directory details from on-premises Active Directory, including any extra attributes your workspaces use. Off the network, they read the same details through Entra.