如何随时删除Microsoft Access数据? [英] How to get rid of Microsoft Access Data Anytime Consent?

问题描述

是否可以自定义Microsoft App权限?我们构建的加载项需要只读访问权限，但是，Microsoft许可说，我们的加载项可以随时查看和更新​​数据.我们不需要更新访问权限.

Is there way to customize the Microsoft App permission? The add-in we have built needs read-only access, however, Microsoft permission says our add-in can see and update data anytime. We don't need update access.

我们有一个Windows加载项，可通过Graph API订阅所有日历事件.但是，我们的客户强烈地恢复了随时访问数据"的权限.

We have a windows add-in that subscribes to all calendar events through Graph API. However, our customers have strongly came back on the "Access Data Anytime" permission.

我们现在将日历权限"从"Calendars.ReadWrite"更改为"Calendars.Read.Shared"，但是，仍然可以看到随时访问数据"，但是，关于更新访问的描述是错误的，我们只需要显示读取权限即可.

We have now changed our Calendar Permission from "Calendars.ReadWrite" to "Calendars.Read.Shared", however, we still see "Access Data Anytime" which is fine, however, the description is wrong about the update access, we need only to display read access.

推荐答案

随时访问数据"仅表示您已请求offline_access范围，因此您的应用将收到刷新令牌.范围未互连，因此无法知道您请求的其他范围或它们可能授予或不授予的数据访问权限.

"Access Data Anytime" simply means you've requested the offline_access scope so your app receives a Refresh Token. Scopes are not interconnected so it has no way of knowing what other scopes you requested or what data access they may or may not grant.

无法更新/自定义用户看到的描述.支持此操作将使用户容易受到恶意操纵(即，请求Users.ReadWrite.All并将说明更改为仅读取您的用户名").

There is no way to update/customize the description the user sees. Supporting this would expose users to malicious manipulation (i.e. request Users.ReadWrite.All and change the description to 'Only read your username').

这篇关于如何随时删除Microsoft Access数据?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！