Skip to main content
Connect your Microsoft tenant once, then turn on each Microsoft service you want Runlayer to read. Every service is read-only. Runlayer reads names, configuration and ownership metadata. It doesn’t read conversations, transcripts or secrets.

​
Connect your tenant

1

Open Sources

In AI Inventory, click Sources. Under Microsoft, click Connect.
2

Sign in

Sign in with a work account in the tenant you want to connect. This identifies the tenant; it grants no data access yet.
3

Approve each service

Back in Runlayer, click Connect next to each service. Microsoft shows a consent page for the Runlayer Cloud Discovery app. Approve it, and Runlayer starts syncing that service.For Entra Agent ID, the approver must be a Global Administrator or Privileged Role Administrator, and the consent page applies to the whole organization. If you don’t hold that role, a Runlayer admin who does can click Connect on just that service.
A service that doesn’t exist in your tenant shows Not available instead of failing the connection. For example, a tenant without Dataverse still syncs Copilot Studio agents through Power Platform.

​
Common errors

​
Remove the Runlayer app from your tenant

Disconnecting in Runlayer deletes the grants Runlayer stored and stops the sync. It doesn’t remove the Runlayer Cloud Discovery enterprise application, its admin consent, or tokens Microsoft has already issued. To remove those too:
  1. In the Microsoft Entra admin center, go to Enterprise applications and search for Runlayer Cloud Discovery.
  2. Open Properties and click Delete.
  3. Optionally, permanently delete it from Deleted applications.
With PowerShell, Remove-MgServicePrincipal does the same.