Using AZure Integration

Question

I'm having issues understanding some of the documentation. 
 I'm bascially stopped at Configuring BackSync. What is this for? The details do not help me understand what is happening. What is being synced? Accounts from Azure back to my AD? Doesn't ADConnect already do some of this? 
 I'm also trying to understand how the integration with AzureAD works in Active Roles. I'm confused from the start with account creation. I'm almost scared to even try it. It feels like I'm creating two different accounts. The wizard for a new user starts with creating an AD account then has a checkbox for creating an Azure account. I don't want to create two different accounts I want them to be the synced by Azure. Is this in relation to the BackSync from above? I would like to know where I can read more about this.

Terrance.Crombie · Answer

The Azure integration in Active Roles is intended to allow viewing and performing simple administration on both on-prem and Azure cloud accounts through a single pane of glass. This saves time and reduces the complexity of using multiple tools to confirm a User's current status. The major benefit of how Active Roles implements the Azure integration is that everything Azure-related that you see within Active Roles is a live, real-time query. There is no sync delay. There is no data inconsistency. The Active Roles Azure BackSync needs to populate only the User's Azure object ID. Once that is obtained, every other Azure attribute is retrieved using a targeted Microsoft Graph API call. 
 Because Microsoft locks direct access to cloud accounts when AADConnect is in play, there are some limitations to what modifications can be performed. Changes sometimes need to be made on-prem and then synced to Azure using AADConnect. Even so, being able to see a User's cloud attributes in Active Roles and trust that is their up-to-the-second state a is very valuable feature.

Endpoint Privilege Management

Using AZure Integration