> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Guru

## After this article

You will be able to connect Guru to Lumos to sync users and roles and to deprovision access.

## Capabilities

| Functionality | Type | Sync | Provision | Description |
| - | - | - | - | - |
| Users | Account | Yes | No | User accounts |
| Roles | Permission | Yes | No | Whether the user is a Guru Admin or User |

| Deprovisioning Action | Type | Description |
| - | - | - |
| Deprovision | User | Fully deletes the user's account in Guru and reclaims a license. Marks the Lumos Account Status as Deprovisioned. |

Deprovisioning is available for Offboarding, Access Reviews, and License Management. It is not available for the AppStore.

**User status mapping.** If Guru returns a user, the Lumos Account Status is Active. If the user is deleted and Guru no longer returns them, the status is Deprovisioned.

## Required plan and roles

* **Guru plan:** you need the Guru **All-in-one** or **Enterprise** plan.
* **Guru role:** the connecting user must be an **admin**.
* **SCIM:** SCIM must be enabled on your Guru account before you connect. If Guru is already connected to your identity provider via SCIM, you cannot connect this integration.

## Read-only access vs provisioning

**Is read-only possible?** No. Guru connects with a single admin-generated API token, and that same token is what Lumos uses to deprovision users. No narrower, read-only token is documented.

**What full provisioning requires.** An API key generated by a Guru admin on the All-in-one or Enterprise plan, entered in Lumos along with the generating admin's email. Follow the steps below.

**Watch out for.** This connector can't be used at all if your organization already manages Guru licenses through SCIM and your identity provider. Because the token isn't scoped, you also can't limit an existing connection to sync-only: it's read-write or nothing.

## Instructions

**Phase 1: Generate an API key in Guru**

1. Follow Guru's instructions to generate an API key. Note the email of the user who generated it.

**Phase 2: Connect in Lumos**

1. Find the Guru card in your Lumos integrations (reconnect an existing card or add a new one).
2. Enter the email of the user who generated the API key in the **Email** field.
3. Enter the API token in the **User Token** field.
4. Click **Connect Guru**.

## API Endpoints Used

<Note>
  The API endpoints this integration uses are available to logged-in Lumos customers. [Log in](/login) to view them.
</Note>

## Troubleshooting

**Can't connect the integration.** Check whether your organization already manages Guru licenses through SCIM and your identity provider. If it does, you cannot use this integration. Otherwise confirm SCIM is enabled, your plan is All-in-one or Enterprise, and the token belongs to a Guru admin.