Question

我发现应用程序可以在此答案中分配给用户，但似乎无法弄清楚如何使用C＃执行此操作。下面是JSON和C＃I尝试。

Azure Active Directory: assign user to an application from the gallery via Graph API

Assign principal (user or group) to application:
•resourceId is the objectId of the servicePrincipal that get created in the tenant for the application
•id is the default role id of App.
•principalId is the objectId of the principal (user or group) that is being assigned to the app.

HTTP POST https://graph.windows.net/7fe877e6-a150-4992-bbfe-f517e304dfa0/users/de4b092e-1dd4-4d40-b74d-a2d7096c9495/appRoleAssignments?api-version=1.5
Authorization : Bearer eyJ0eXAiOi--snip--JKVBfk_Q
Content-Type : application/json
Content-Length : 176
{
"id":  "fc60bc23-43df-4a60-baaa-f0b8694e0259",
"principalId":  "de4b092e-1dd4-4d40-b74d-a2d7096c9495",
"resourceId":  "93c60e8e-74f9-4add-9ae2-dd9bc0d6edcd"
}
        AppRoleAssignment appAssignment = new AppRoleAssignment();
        appAssignment.Id = appRole.Id;
        appAssignment.PrincipalId = new Guid(retrievedUser.ObjectId);
        appAssignment.ResourceId = new Guid("aa9b2f6b-6528-4552-a202-2039ce86d95c");

        appAssignment.UpdateAsync();

Answer 1

派对有点晚了但是！由于文档完全缺失，我不得不做大量的谷歌搜索和跟踪＆amp;错误。

解决方案是像这样更新用户：

var appRoleAssignment = new AppRoleAssignment()
{
    ResourceId = Guid.Parse(principal.ObjectId),
    PrincipalId = Guid.Parse(user.ObjectId),
    Id = Guid.Parse(roleId)
};

user.AppRoleAssignments.Add(appRoleAssignment);
await user.UpdateAsync();

Azure AD Graph API - 使用C＃将用户分配给应用程序

1 个答案: