Sync Overrides

While the PAM-Pro engine re-evaluates account assignments and rotations automatically on a schedule, administrators can force a manual reconciliation to address immediate directory drift.

Use the Sync Overrides to ensure your "Private Body" (Azure infrastructure) matches your "Shared Brain" (PAM-Pro logic).

1. Access Automation Controls

In the System Operator Manual, navigate to Operations > Sync Overrides.

2. Trigger Global Reconciliation

Click "Run Auto-Assignment Engine". This action forces PAM-Pro to scan all managed accounts and re-apply current policy logic across your Microsoft Entra ID tenant.

3. Monitor Sync Progress

The dashboard will display a real-time progress bar as the engine communicates with the Azure Resource Manager (ARM). You'll see count metrics for Rotated Secrets and Updated Group Memberships.

The Background Jobs tab showing scheduled rotations and discovery sweeps with their next run time, expected duration and the number of accounts affected, above a history of past runs including one warning run that rotated three of four accounts and queued the failure for retry. — The scheduler. Upcoming work above, completed runs below - a partial failure names the account and the error it returned.

4. Review Sync Results

Once complete, a summary report will reveal any accounts that failed to synchronize due to Graph API throttling or insufficient permissions.

The Assignments tab showing the Employee ID Match and UPN Match rules with a Run Assignment Now control, above a log of the last sweep listing two assignments made and one account skipped. — The auto-assignment engine and its last run. **Run Assignment Now** forces the reconciliation described above.

Best Practice: Manual sync triggers are intended for out-of-band changes. Standard governance should be handled by the background scheduler to ensure optimal system performance.

Contact Support