Skip to main content
This is the classic Airtable connector, identified by the domain app id of airtable.com. It syncs users and their entitlement associations, tracks last activity, and deprovisions users. For full user lifecycle management (create, activate, deactivate, delete) plus group and base/workspace access provisioning, use the Airtable Provisioning connector.

After this article

You will be able to connect Airtable to Lumos to sync users and their entitlement associations, track last activity, and deprovision users.

Capabilities

Required plan and roles

  • Airtable account: the integration connects to an Airtable Enterprise account. You need your Enterprise Account ID to set it up, and the scopes below are Airtable enterprise API scopes.
  • Scopes:
    • enterprise.scim.usersAndGroups:manage: add, update, or remove users and groups, and manage attributes associated with users and groups (required for deprovisioning)
    • enterprise.user:read: view user profiles, email addresses, and associated metadata
    • enterprise.user:write: update user profiles, roles, or other attributes
  • Permission scoping: there is no read-only variant. The manage and write scopes are required for Lumos deprovisioning actions.

Read-only access vs provisioning

Is read-only possible? No. This connector authorizes through Airtable’s enterprise OAuth scopes, and the scope that lets Lumos deprovision users, enterprise.scim.usersAndGroups:manage, is granted together with the read and write scopes during setup. Airtable does not offer a narrower read-only variant of this connector. What full provisioning requires. Provisioning here is limited to removing a user from the Airtable enterprise account. It uses the same Enterprise Account ID and OAuth authorization (enterprise.scim.usersAndGroups:manage, enterprise.user:read, enterprise.user:write) as sync. Follow the steps below. Watch out for. This connector does not create, activate, or deactivate users, it only syncs and removes them. If you need full lifecycle management (create, activate, deactivate, delete) or group and base/workspace role provisioning, use the Airtable Provisioning connector instead, which is a separate connection.

Instructions

Phase 1: Find your Enterprise Account ID in Airtable
  1. Locate your Airtable Enterprise Account ID (available to Airtable enterprise admins in the Airtable admin panel).
Phase 2: Connect in Lumos
  1. Find the Airtable card in your Lumos integrations (reconnect an existing card or add a new one).
  2. Enter your Enterprise Account ID.
  3. Click Connect.
  4. Follow the instructions in the pop-up that appears to authorize the scopes and finish connecting.

Troubleshooting

Connection fails after entering the Enterprise Account ID. Verify the ID belongs to the enterprise account you administer and that the authorizing user is an Airtable enterprise admin able to grant the enterprise.* scopes. Deprovisioning actions fail with permission errors. Confirm the enterprise.scim.usersAndGroups:manage scope was granted during the OAuth authorization. Re-run the connection pop-up if scopes were declined.