获取Azure AD中用户的权限 [英] Get permissions for an User in Azure AD

问题描述

我的目的是获取给定用户的权限.特别是，我想了解他是否可以在Azure AD中创建/删除用户和组.是否可以使用某些Graph API或C#类获取此信息?

解决方案

您可以调用

my purpose is to get permissions for a given user. In particular, I'd like to get whether he can create/delete users and groups in the Azure AD. Is there a way to get this information using some Graph APIs or C# classes?

解决方案

You can call List memberOf api to get the information of the Azure AD user role, and then determine whether the user has the permission to create/delete users and groups based on the role.

GET https://graph.microsoft.com/v1.0/users/{id}/memberOf

You can try to use Graph Explorer to test:

这篇关于获取Azure AD中用户的权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！