> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Airtable (Classic)

*This is the classic **Airtable** connector, identified by the domain app id of airtable.com. It syncs users and their entitlement associations, tracks last activity, and deprovisions users. For full user lifecycle management (create, activate, deactivate, delete) plus group and base/workspace access provisioning, use the Airtable Provisioning connector.*

## After this article

You will be able to connect Airtable to Lumos to sync users and their entitlement associations, track last activity, and deprovision users.

## Capabilities

| Functionality | Type | Sync | Provision | Description |
| :- | :- | :- | :- | :- |
| Users | Account | Yes | No | Sync user accounts and their entitlement associations, with last-activity tracking. Deprovisioning supported |

| Deprovisioning Action | Type | Description |
| :- | :- | :- |
| Deprovision | User | Removes the user from the Airtable enterprise account |

## Required plan and roles

* **Airtable account:** the integration connects to an Airtable **Enterprise** account. You need your **Enterprise Account ID** to set it up, and the scopes below are Airtable enterprise API scopes.
* **Scopes:**
  * `enterprise.scim.usersAndGroups:manage`: add, update, or remove users and groups, and manage attributes associated with users and groups (required for deprovisioning)
  * `enterprise.user:read`: view user profiles, email addresses, and associated metadata
  * `enterprise.user:write`: update user profiles, roles, or other attributes
* **Permission scoping:** there is no read-only variant. The `manage` and `write` scopes are required for Lumos deprovisioning actions.

## Read-only access vs provisioning

**Is read-only possible?** No. This connector authorizes through Airtable's enterprise OAuth scopes, and the scope that lets Lumos deprovision users, `enterprise.scim.usersAndGroups:manage`, is granted together with the read and write scopes during setup. Airtable does not offer a narrower read-only variant of this connector.

**What full provisioning requires.** Provisioning here is limited to removing a user from the Airtable enterprise account. It uses the same Enterprise Account ID and OAuth authorization (`enterprise.scim.usersAndGroups:manage`, `enterprise.user:read`, `enterprise.user:write`) as sync. Follow the steps below.

**Watch out for.** This connector does not create, activate, or deactivate users, it only syncs and removes them. If you need full lifecycle management (create, activate, deactivate, delete) or group and base/workspace role provisioning, use the Airtable Provisioning connector instead, which is a separate connection.

## Instructions

**Phase 1: Find your Enterprise Account ID in Airtable**

1. Locate your Airtable **Enterprise Account ID** (available to Airtable enterprise admins in the Airtable admin panel).

**Phase 2: Connect in Lumos**

1. Find the Airtable card in your Lumos integrations (reconnect an existing card or add a new one).
2. Enter your **Enterprise Account ID**.
3. Click **Connect**.
4. Follow the instructions in the pop-up that appears to authorize the scopes and finish connecting.

## Troubleshooting

**Connection fails after entering the Enterprise Account ID.** Verify the ID belongs to the enterprise account you administer and that the authorizing user is an Airtable enterprise admin able to grant the `enterprise.*` scopes.

**Deprovisioning actions fail with permission errors.** Confirm the `enterprise.scim.usersAndGroups:manage` scope was granted during the OAuth authorization. Re-run the connection pop-up if scopes were declined.