Short answer: not today in released Prefect Cloud 3.x. With SCIM / directory sync from Microsoft Entra ID: - Users can be provisioned - Provisioned users currently get a basic Member role - Admin and Owner roles are not currently assignable via SCIM in the released product So if you need someone to be an Admin or Owner, you’d provision them via SCIM and then manually promote them in Prefect Cloud. Relevant docs: - SCIM guide - SSO guide - Contact Prefect for enterprise/identity roadmap questions A couple of related notes: - SCIM / SSO is generally an Enterprise feature - Workspace access/permissions may still need separate management depending on your setup If you want, I can also outline the exact Entra ID → Prefect SCIM setup flow and where the manual role assignment step fits.