adal - Can You Grant Admin Access to an Azure Application through PowerShell -


is there way grant administrative consent application using powershell? imagine have done connect-msolservice , provided credentials of account tenant admin; there way provide tenant-wide consent based on application client id?

to clarify, mean granting application ability access directory admin?

if case, can this:

# using windows azure active directory module windows powershell # # connect tenant modify connect-msolservice # => login  # service principal add role $serviceprincipal = get-msolserviceprincipal -serviceprincipalname principal.name  # role object id # alternatively, can list roles (in order different role name) using `get-msolrole` $roleid = (get-msolrole -rolename "directory readers").objectid  # add role service principal add-msolrolemember -roleobjectid $roleid -rolememberobjectid     $serviceprincipal.objectid -rolemembertype serviceprincipal  # check our work get-msolrolemember -roleobjectid $roleid # => should include principal.name in list 

from here:https://social.msdn.microsoft.com/forums/azure/en-us/f12c15b7-e2cc-4056-8f0c-1dbfceaeec24/error-adding-service-principal-to-role-this-role-does-not-exist-check-the-name-and-try-again?forum=windowsazuread&prof=required

consenting permissions requested application (through requiredresourceaccess) can done via adal during authorization process.


Comments

Popular posts from this blog

python - TypeError: start must be a integer -

c# - DevExpress RepositoryItemComboBox BackColor property ignored -

django - Creating multiple model instances in DRF3 -