You can register a Microsoft Entra ID (Azure ID) with Trellix ePO - On-prem to leverage User Based Policy enforcement and synchronize the devices from Microsoft Entra ID to the ePO - On-prem System Tree.
When you register your organization’s Microsoft Entra ID (Azure AD) with ePO - On-prem you can:
Synchronize the devices from Microsoft Entra ID (Azure ID) to the ePO - On-prem System Tree. For more information, see Synchronizing the System Tree with your Active Directory.
Browse and choose Microsoft Entra ID (Azure AD) users and user groups in the Policy Assignment pop up and create a user-based policy assignment rule as mentioned in Assigning user-based policies.
Create an user account with Microsoft Entra ID authentication. For more information on the authentication methods supported by ePO, see User authentication.