> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# New Relic

## After this article

You will be able to connect New Relic to Lumos to sync users, groups, and roles.

## Capabilities

| Functionality | Type | Sync | Provision | Description |
| - | - | - | - | - |
| Users | Account | Yes | No | User account |
| Groups | Permission | Yes | No | Groups |
| Roles | Permission | Yes | No | Roles |

Activity tracking is supported. Lumos tracks the last login timestamp for synced users so you can monitor access patterns.

## Required plan and roles

* **New Relic role:** no scopes are required for this integration, but the API key must be created by an **Administrator**.
* **New Relic plan:** your plan must include **User Management API** access.

## Read-only access vs provisioning

**Is read-only possible?** Yes, and it's the only mode. This connector only syncs users, groups, and roles from New Relic. It doesn't provision or deprovision anything there.

**What read-only requires.** A New Relic User-type API key created by an Administrator, plus your Authentication Domain ID, on a plan with User Management API access. No specific scopes are required beyond that. Follow the steps below.

**Watch out for.** The API key you generate carries whatever access the creating Administrator's account has in New Relic. There's no separate read-only key type, so key rotation or regeneration should go through an Administrator to avoid breaking the sync.

## Instructions

**Phase 1: Create an API key**

New Relic API keys authenticate requests and manage integrations with New Relic's platform.

1. Visit New Relic and log in to your account.
2. Go to **Account settings** (click your profile icon).
3. Select **API Keys** from the dropdown menu or the settings page.
4. Click **Create a key** and create a **User** type key for the selected account.
5. Copy and store the key right away, since it might not be shown again.

**Phase 2: Find your Authentication Domain ID**

An Authentication Domain is a grouping of users governed by the same user management settings, such as how they're provisioned and how they authenticate.

1. Log in to your New Relic account.
2. In the left-hand sidebar, click your account menu (your profile icon).
3. Go to **Administration → Authentication Domains**.
4. Copy the ID of the Authentication Domain you want to connect to this integration.

**Phase 3: Connect in Lumos**

1. Click the New Relic card in your Lumos integrations (reconnect an existing card or add a new one).
2. Provide the **API Key** and **Authentication Domain ID**.
3. Click **Connect**.

## API Endpoints Used

<Note>
  The API endpoints this integration uses are available to logged-in Lumos customers. [Log in](/login) to view them.
</Note>

## Troubleshooting

**API key authentication failures ("Invalid API Key" or "Authentication failed").** Verify you copied the complete User key without extra spaces. Make sure the key hasn't been deleted in New Relic. Check that the key type is **User key**, not License key or Browser key. Confirm your New Relic account is active and not suspended. Generate a new User key if the original may be compromised, and verify the key has access to the accounts you want to sync.

**Groups not appearing.** Verify your User key has permission to view groups. Check that groups exist in your authentication domain and that each group has at least one member. Confirm you selected the correct authentication domain, then review New Relic's user management settings.

**Users from multiple authentication domains not syncing correctly.** Verify your User key has access to all authentication domains. Check that every domain is configured properly in New Relic. If you use SAML or SCIM, make sure SSO domains are set up, then review domain-specific group memberships. Contact New Relic support if domain access issues persist.

**GraphQL query errors.** Verify NerdGraph API access is enabled for your account, and check New Relic's API status page for service issues. Make sure your User key has the required query permissions. If you see "Too many requests," review rate limiting. Disconnecting and reconnecting the integration can also clear the error.