如何在获得管理员同意的情况下获取与Microsoft Graph APIs组相关的权限 [英] How to get Microsoft Graph APIs group related permissions with administrator's consent

问题描述

我们正在开发一个与Microsoft graph API集成的应用程序.现在，我可以使用工作人员帐户和个人帐户的用户授予访问权限(例如读取用户的个人资料等)使用Microsoft Graph API登录. 如果它是Microsoft工作帐户，我们想读取用户的组信息.从 doc 中，要读取用户的组信息，需要管理员的同意.但是我们如何得到呢?我四处搜寻，但没有得到答案.我们需要联系每个租户的管理员以使他们授权我们的应用程序吗?

We are working on an App to integrate with Microsoft graph API. Now I can sign in with Microsoft Graph API with user's grant accesses such as to read user's profile etc, for both a work account and personal account. We want to read user's group information if it's a Microsoft work account. From the doc, to read user's group info, we need the administrator's consent. But how do we get that? I searched around but failed to get the answer. Do we need to contact each tenant's administrator to get them authorize our app?

在此链接组部分中，看来我们不能用户单击接受按钮登录时获得组权限.请问您要花多长时间支持?

From this link group section, it seems we can't get the group permission when user signing in clicking accept button. May I ask how long it takes if you want to support that?

推荐答案

Fei的回答在技术上是正确的.但是，我怀疑这里的混乱更多是与管理员同意"的含义有关，而不是如何请求这些范围.

Fei's answer is technically correct. I suspect however that the confusion here has more to do with the meaning of "administrator's consent" than how to request those scopes.

当我们谈论管理员同意"时，我们实际上是在说那些作用域只能在用户以管理员权限登录时使用.这不是不是，它意味着管理员需要先征得用户的同意，然后才能启用它们.

When we talk about "administrator's consent" we are really saying that those scopes can only be used when the user login in as administrative privileges. It does not mean that an Administrator needs to give consent to a User before they can be enabled.

• 用户范围可用于任何帐户
• 管理范围只能与管理员帐户一起使用

这篇关于如何在获得管理员同意的情况下获取与Microsoft Graph APIs组相关的权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！