如何在管理员同意的情况下获取 Microsoft Graph API 组相关权限 [英] How to get Microsoft Graph APIs group related permissions with administrator's consent

问题描述

我们正在开发一款与 Microsoft 图形 API 集成的应用.现在，我可以使用 Microsoft Graph API 登录，并使用用户的授权访问，例如读取用户的个人资料等，适用于工作帐户和个人帐户.如果它是 Microsoft 工作帐户，我们想读取用户的组信息.从doc，读取用户的组信息，我们需要管理员的同意.但是我们如何得到呢?我四处寻找，但没有得到答案.我们是否需要联系每个租户的管理员以让他们授权我们的应用程序?

We are working on an App to integrate with Microsoft graph API. Now I can sign in with Microsoft Graph API with user's grant accesses such as to read user's profile etc, for both a work account and personal account. We want to read user's group information if it's a Microsoft work account. From the doc, to read user's group info, we need the administrator's consent. But how do we get that? I searched around but failed to get the answer. Do we need to contact each tenant's administrator to get them authorize our app?

从这个 link 群组部分，看来我们不能用户登录时单击接受按钮获取组权限.请问要支持的话需要多长时间?

From this link group section, it seems we can't get the group permission when user signing in clicking accept button. May I ask how long it takes if you want to support that?

推荐答案

Fei 的回答在技术上是正确的.然而，我怀疑这里的混淆更多地与管理员同意"的含义有关，而不是如何请求这些范围.

Fei's answer is technically correct. I suspect however that the confusion here has more to do with the meaning of "administrator's consent" than how to request those scopes.

当我们谈论管理员同意"时，我们实际上是在说这些范围只能在用户以管理权限登录时使用.它确实不意味着管理员需要先同意用户才能启用.

When we talk about "administrator's consent" we are really saying that those scopes can only be used when the user login in as administrative privileges. It does not mean that an Administrator needs to give consent to a User before they can be enabled.

• 用户范围可用于任何帐户
• 管理范围只能用于管理员帐户

这篇关于如何在管理员同意的情况下获取 Microsoft Graph API 组相关权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！