如何获得“授予权限"旧版Azure AD应用程序注册中的“按钮"与“授予管理员同意"不同；在新的体验中? [英] How is the "Grant permissions" button in legacy Azure AD app registration different from "Grant admin consent" in the new experience?

问题描述

当前Azure AD应用程序注册体验中的授予管理员同意"按钮(在Azure门户> Azure AD>应用程序注册>(app)> API权限下)有时会变灰.在旧版体验中，我总是可以单击按钮.

The "Grant admin consent" button in the current Azure AD app registration experience (under Azure portal > Azure AD > App registrations > (app) > API permissions) is sometimes greyed out. In the legacy experience, I could always click the button.

两者之间有什么区别?

推荐答案

旧版应用程序注册体验中的授予权限"按钮的行为取决于您被允许执行的操作:

The "Grant permission" button in the legacy app registration experience behaves differently depending on what you're allowed to do:

• 如果允许您进行租户范围内的管理员同意，则该按钮将授予所有帐户权限:

如果不允许您进行租户范围内的管理员同意，则该按钮将尝试仅授予您的帐户权限:

If you're not allowed to do tenant-wide admin consent, the button attempts to grant the permissions for your account only:

如果即使您自己也不被允许，它将无法授予任何权限:

If you're not allowed to consent even for yourself, it fail to grant any permissions:

在新的(当前)应用程序注册体验中，仅授予管理员同意"按钮仅提议租户范围内的管理员同意:

In the new (current) app registration experience, the "Grant admin consent" button only proposes tenant-wide admin consent:

• 如果允许您进行承租人范围内的管理员同意，则该按钮将被启用，并将导致向所有人授予权限:

• If you're allowed to do tenant-wide admin consent, the button is enabled and will result in the permissions being granted for everyone:

如果您不是管理员，则只需禁用该按钮即可:

If you're not an admin, the button is simply disabled:

新的应用程序注册体验当前不像传统体验那样提供仅代表已登录用户授予同意的选项.如果您想自己授予同意，最好的方法是实际登录该应用程序，然后授予同意.

The new app registration experience does not currently offer the option for granting consent on behalf of the signed-in user only, like the legacy experience did. If you want to grant consent for yourself, the best way to do so is to actually sign in to the app, and grant consent then.

这篇关于如何获得“授予权限"旧版Azure AD应用程序注册中的“按钮"与“授予管理员同意"不同；在新的体验中?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！