![]() ![]() When we grant permissions or request a token from Azure AD, we will see two different token types: Delegated and Application. Tip 2: The Difference Between Application and Delegated Tokens / Permissions From the “Overview” page, take note of the “Application (Client) ID” and the “Directory (Tenant) ID”, we’ll need these for connecting Confirm the consent and our permissions are in place and our App Reg is ready. With the permissions in place, we need to ensure to click the “Grant admin consent” button to grant consent to the app for our environment. Finally, the Redirect URI is used when we have an application interacting with Graph but since we are just using PowerShell, set this to “ (The value isn’t overly important as long as it doesn’t point to an application but localhost is a safe bet) Give it a descriptive name and for running scripts in your own environment, you will only need to set the supported account types to “Accounts in this organizational directory only”. #POWERSHELL JSON QUERY REGISTRATION#We first set up the App Registration from the Azure AD Portal under “Application Registrations” -> “New Registrations”. There are a few things to note when setting up a new App Registration in the Azure AD Portal. ![]() This allows us to request access tokens with the appropriate permissions assigned and have a basis for our authentication and expose the APIs. When we work with Graph, we need to scope our activities and permissions using an application registration. Tip 1: Setting Up An Application Registration I’ve put together a list of my top 7 tips for working with Graph in PowerShell which should help you get started leveraging it in your day to day work. #POWERSHELL JSON QUERY HOW TO#Initially trying to understand how to work with the Graph can be intimidating as there are a number of new concepts to understand. There are multiple ways to leverage it using multiple languages but for somebody coming from an infrastructure background, that wants to manage, report or automate tasks in Microsoft 365, PowerShell makes the most sense as a lot of us will already be very familiar with it. The Graph API is an amazingly powerful tool for both developers and admins to achieve some really cool things in Microsoft 365. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |