Printix Administrator Manual

1.3.1. Microsoft integration

Sign in with Microsoft

  • Automatic registration of the user happens the first time the user Sign in with Microsoft to Printix.
  • Single sign-on (SSO) to Printix with users’ Microsoft account.
  • Supports multiple Microsoft Entra directories per Printix Home.
    • Printix Home is the term for what we create for you when you start to use our Printix Cloud Print Management Service. In technical cloud terms this is also referred to as your tenant. Printix Home also refers the internet address used to access your Printix Home in a browser. The address acme.printix.net is an example of a Printix Home.
  • Supports Microsoft Entra Conditional Access.
  • Supports Microsoft Entra guest users, also known as Microsoft Entra business-to-business (B2B) collaboration users.
  • Users’ Department is recorded and can be used to post process data for subsequent departmental billing.
  • If you Delete a user in Microsoft Entra ID, the user is also deleted in Printix, provided Microsoft Entra groups are enabled.
  • If you Block sign-in for a user in Microsoft Entra ID, the user is signed out from Printix and will not be able to sign in until the user’s account is unblocked in Microsoft Entra ID.
  • Administrator can Accept Printix for all users.
  • Automatic Sign in to Printix Client on Microsoft Entra joined Windows 10 and Windows 11 computers.
    • Works with Windows editions: Pro, Enterprise, and Education. Microsoft does not support Microsoft Entra join on Windows Home editions.
  • Automatic Sign in to Printix Client on Microsoft Entra joined Windows Server 2016, 2019, and 2022.

Microsoft Entra enterprise applications and permissions

The Microsoft integration involves the adding of these Microsoft Entra enterprise applications. Do NOT change the permissions of these applications as it may break functionality.

  • Printix. Required to enable Microsoft Entra authentication (Sign in with Microsoft).
    Permissions required:
    • Email – Delegated – View users’ email address.
    • OpenId – Delegated – Sign users in.
    • Profile – Delegated – View users’ basic profile.
    • User.Read – Delegated – Sign in and read user profile.
  • printix-cloud-sync. Required to enable Microsoft Entra groups and the synchronization of these.
    Permissions required:
    • Directory.Read.All – Application – Read directory data.
    • Group.Read.All – Application – Read all groups.
    • Member.Read.Hidden – Application – Read all hidden memberships.
    • User.Read – Delegated – Sign in and read user profile.
    • User.Read.All – Application – Read all users’ full profiles.
  • Printix Universal Print. Required to integrate with Universal Print by Microsoft.
    Permissions required:
    • Printer.FullControl.All – Delegated – Register, read, update, and unregister printers.
    • Printer.ReadWrite.All – Application – Read and update printers.
    • PrinterShare.ReadWrite.All – Delegated – Read and write printer shares.
    • PrintJob.ReadWrite.All – Delegated – Read and write print jobs.
    • PrintJob.ReadWrite.All – Application – Read and write print jobs.
    • PrintTaskDefinition.ReadWrite.All – Application – Read, write and update print task definitions.
    • User.Read – Delegated – Sign in and read user profile.
    • PrinterProperties.ReadWrite – Delegated – Read and write the properties and attributes of users’ printers.
    • PrinterProperties.ReadWrite – Application – Read and write the properties and attributes of printers.
    • Printers.Read – Application – Read printers.
    • PrintJob.Read – Application – Read the metadata and payload of users’ print jobs.
  • Printix Capture OneDrive. Required to create a capture workflow for Microsoft OnePoint.
    Permissions required:
    • Files.ReadWrite.All – Application – Read and write files in all site collections.
    • User.Read – Delegated – Sign in and read user profile.
  • Printix Capture SharePoint. Required to create a capture workflow for Microsoft SharePoint Online.
    Permissions required:
    • Sites.ReadWrite.All – Application – Read and write items in all site collections.
    • User.Read – Delegated – Sign in and read user profile.
  • Azure Blob Storage. Uses access keys for Azure Blob Storage to generate Shared Access Signatures (SAS) signed read, write and delete links for the Azure Blob Storage.

Deploy with Microsoft Endpoint Manager

  • Deploy Printix Client for Windows MSI file and Printix Client for Mac PKG file with Microsoft Endpoint Manager.
    • Optionally postpone sign in to Printix Client until restart. This method can be used to install Printix Client as part of an automated process (like Windows Autopilot) that completely configures a new computer before this is delivered to the user. This way, sign in is postponed until the user starts to use the computer.
  • Deploy Printix App for Android and Printix App for iOS/iPadOS with Microsoft Endpoint Manager.

Microsoft Entra groups

  • Use Microsoft Entra groups to control access to printers and deploy printers based on users’ and computers’ group membership. Nested groups are not supported.
  • Users’ and computers’ membership of groups is maintained in Microsoft Azure (portal.azure.com).
  • Print queue/group membership is maintained in Printix Administrator by adding groups to print queues.
    • A print queue that has Exclusive access checked, can be accessed ONLY by the users in any of those groups. This is based only on users’ group membership, and not on computers’ group membership.
    • A print queue that has Add print queue automatically checked, will be added automatically to the computer, when a user in any of those groups signs in.
    • A print queue that has Set as default printer checked, will become the default printer for the users and computers in the group.

Eliminate print server

  • Serverless print infrastructure.
  • With Printix Administrator you can configure Printix and centrally manage your printers from a web browser. You can have print queues automatically added on users’ computers.
  • Printix maintains a global Driver store with Windows and macOS print drivers. When you start to use Printix Client, it will automatically upload print drivers and put them in your Printix driver store.

Azure Virtual Desktop

Universal Print

Secure print

  • Allows you to print confidential documents. Just wait until you are at the printer and then use Printix App on your phone to release your documents.
  • Printix App is available as a native app for Android and iOS/iPadOS phones and tablets, and as a web app that runs in a web browser on your phone, tablet and computer.
  • If Printix Go is installed on the printer, then you can sign in with card or ID code and release documents from the touchscreen control panel of the printer.

Mobile print

  • Print from phones and tablets, Android and iOS/iPadOS, to Printix managed printers enabled for mobile print.

Cloud Print API

  • Intended for use by applications that wish to push print jobs in printer native or PDF format into a Printix print queue, and for organizations who want to do guest user administration. You can access the API documentation at printix.github.io.

Azure Blob Storage

  • Enable storage of pending documents in your secure Azure Blob Storage.
    • Documents printed Via the cloud or as Mobile print from phones and tablets (Android and iOS/iPadOS), will also go via your cloud storage.

Microsoft Power BI

Available on Microsoft storefronts

Sign up via Microsoft AppSource

  1. Visit and Sign in to appsource.microsoft.com.
  2. In the search box, enter Printix.
  3. In the results pane, select Printix Cloud Print Management and select Free trial.
  4. If you agree to the terms, select Continue and you will be taken to Printix to complete the setup.
  5. You will be asked to Sign in with your work account. Accounts like (yourname)@(company).microsoftonline.com should only be used if this is also an email account.
    If asked, select Accept to grant Printix permission to:
    • Access your data anytime.
    • View your basic profile.
    • If you see the check box Consent on behalf of your organization, it is because you have the role as global admin in Microsoft Entra ID and Printix has not yet been accepted for all users. Check Consent on behalf of your organization so Printix can have access to the specified resources for all users in your organization. No one else will be prompted.
  6. Complete the steps presented by the Setup assistant.

Sign up via Microsoft Azure Marketplace

  1. Visit and Sign in to azuremarketplace.microsoft.com.
  2. In the search box, enter Printix.
  3. In the results pane, select Printix Cloud Print Management and select Free trial.
  4. If you agree to the terms, select Continue and you will be taken to Printix to complete the setup.
  5. You will be asked to Sign in with your work account. Accounts like (yourname)@(company).microsoftonline.com should only be used if this is also an email account.
    If asked, select Accept to grant Printix permission to:
    • Access your data anytime.
    • View your basic profile.
    • If you see the check box Consent on behalf of your organization, it is because you have the role as global admin in Microsoft Entra ID and Printix has not yet been accepted for all users. Check Consent on behalf of your organization so Printix can have access to the specified resources for all users in your organization. No one else will be prompted.
  6. Complete the steps presented by the Setup assistant.

Feedback

Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.

Post your comment on this topic.

Please do not use this for support questions.
Printix Support

Post Comment