Skip to main content
Lumos offers separate Monday.com connectors, each its own integration card. This article covers Monday.com (Basic), the non-Enterprise version, connected via OAuth with no SCIM access required. For Monday.com Enterprise plans (SCIM provisioning plus GraphQL activity data), use Monday (Enterprise). An older three-input connector is deprecated, so new connections should use Basic or Enterprise.

​
After this article

You will be able to connect Monday.com to Lumos to sync users, account roles, teams, and team roles, manage team membership, and activate or deactivate users during onboarding and offboarding.

​
Capabilities

Provisioning behavior:
  • Create: Lumos invites the user by email (invite_users mutation), and the account shows as Pending until they accept. Roles and team memberships can’t be included in the create request, so Lumos assigns them afterward. Inviting an email that’s already in use fails.
  • Team membership: team membership is the only entitlement Lumos writes. Assigning a Team Role adds the user to the team as a Member, and unassigning removes them from the team. The Owner team role and all account roles sync for visibility but can’t be assigned or removed from Lumos.
  • Activate and deactivate: Lumos runs the activate_users and deactivate_users mutations, so reactivating a deactivated account is supported. Deactivated accounts show as Suspended in Lumos.
Activity tracking: supported (Last Login), read from the users query.

​
Required plan and roles

  • Monday.com role: the authenticating user must have an admin role in Monday.com. Provisioning operations (adding and removing team members, creating and deactivating users) are admin-only in Monday’s API, while syncing works with member access.
  • OAuth scopes (granted via the Lumos OAuth app):
    • account:read to validate credentials
    • users:read to list users and read last activity
    • users:write to create, activate, and deactivate users
    • teams:read to list teams, team memberships, and team roles
    • teams:write to add or remove team members. Lumos began requesting this scope in August 2026, so connections authorized before then must be reconnected to grant it

​
Instructions

Phase 1: Install the Lumos OAuth app in Monday.com
  1. Logged in to Monday.com as an admin, install the Lumos OAuth application via this authorization link.
Phase 2: Connect in Lumos
  1. Click the Monday.com (Basic) card in your Lumos integrations.
  2. Click Connect and follow the instructions in the pop-up to finish connecting.
If you connected Monday.com (Basic) before August 2026, reconnect once so the teams:write scope is granted. Team role assignment fails without it. Monday.com OAuth tokens don’t expire. The connection stays valid until the Lumos app is uninstalled from your Monday.com account.

​
API Endpoints Used

​
Troubleshooting

Provisioning a user to a team fails with a generic “unexpected error”. Two causes. Monday’s add_users_to_team mutation is admin-only, so the account used to connect needs the Admin role. The connection also needs the teams:write scope, which Lumos began requesting in August 2026, so connections authorized earlier do not have it. Reconnect using an admin account, approve all requested scopes, and retry. Creating a user fails. Another Monday.com user already uses that email address. A team role other than Member won’t assign. Only the Member team role can be assigned from Lumos. The Owner role and account roles are sync-only.