在Microsoft Graph中查找Azure AD架构扩展AppId [英] Finding Azure AD Schema Extension AppId in Microsoft Graph

问题描述

如果一个人通过Azure AD Connect同步自定义属性，则会对Azure AD进行架构扩展，并且在Azure AD中创建一个关联的应用程序，该应用程序的DisplayName为租户架构扩展应用程序".

不幸的是，这些扩展名也用extension_AppIdGuid_attributeName唯一命名.

使用Azure AD PowerShell模块，可以很容易地找到它:

 $ExtensionGuid = ((Get-AzureADApplication | 
    Where-Object {$_.DisplayName -eq "Tenant Schema Extension App"}).AppId).Replace("-","")
 

这些也可以在Microsoft Graph中查询.但是，我无法在Microsoft Graph中找到一种机制来查找AppId是什么.

我已查询:

• /organization
• /schemaExtensions
• /$metadata

Azure AD Graph似乎具有此功能，但是它已经不复存在，Microsoft Graph是未来.我要在那儿.感谢您的帮助.

解决方案

您可以通过以下查询在Microsoft Graph中找到Tenant Schema Extension应用程序:

https://graph.microsoft.com/beta/applications?$filter=displayName eq 'Tenant Schema Extension App'

不同于Azure AD Graph的Application对象具有id和appId，Microsoft Graph Application对象仅具有id属性，该属性与Azure AD Graph中的appId值相对应. /p>

注意:根据Microsoft Graph文档中的

Unfortunately, these extensions are uniquely named, as well with extension_AppIdGuid_attributeName.

With the Azure AD PowerShell module, it is easy enough to find this:

$ExtensionGuid = ((Get-AzureADApplication | 
    Where-Object {$_.DisplayName -eq "Tenant Schema Extension App"}).AppId).Replace("-","")

These can also be queried within the Microsoft Graph. However, I cannot find a mechanism within the Microsoft Graph to find what the AppId is.

I have queried:

• /organization
• /schemaExtensions
• /$metadata

The Azure AD Graph seems to have the capability, but it is going away and the Microsoft Graph is the future. I want it there. Any help is appreciated.

解决方案

You can find the Tenant Schema Extension app in Microsoft Graph via the following query:

https://graph.microsoft.com/beta/applications?$filter=displayName eq 'Tenant Schema Extension App'

Unlike the Azure AD Graph which Application object which has an id and an appId, the Microsoft Graph Application object only has an id property which corresponds to the appId value in the Azure AD Graph.

Note: As per the Microsoft Graph documentation for GET /applications you require any the following permissions:

• Delegated (work or school account): Directory.Read.All, Directory.ReadWrite.All, Directory.AccessAsUser.All
• Application: Directory.Read.All, Directory.ReadWrite.All

这篇关于在Microsoft Graph中查找Azure AD架构扩展AppId的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！