Read source from Entra ID
CYNC queries Microsoft Graph /users with delta tokens to fetch only the users that changed since the last run. Source filters narrow the list to exactly the users you want exposed (e.g. enabled employees in a specific group).