25,161 questions
Grant-CsApplicationAccessPolicy with az PowerShell command
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
I am trying to give my app an access policy as a user.
The next commands work for me:
New-CsApplicationAccessPolicy -Identity myAPP-Link -AppIds "[my app id]" -Description "[description]"
Grant-CsApplicationAccessPolicy -PolicyName myAPP-Link -Identity "[my user id]"
I am trying to use the az command instead. Af far as I have seen, it should be something like:
az ad app permission grant --id
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
Anonymous
2022-12-13T08:03:19.063+00:00 As mentioned in the document https://learn.microsoft.com/en-us/cli/azure/ad/app/permission?view=azure-cli-latest#az-ad-app-permission-grant-required-parameters, --scope is a required parameter. Can you please try to add the scopes parameter and check again?
-
Anonymous
2022-12-14T06:22:52.62+00:00 @Anonymous - According to the document, there is no argument --user-object-id. Can you please add arguments that are mentioned in the document and check again. https://learn.microsoft.com/en-us/cli/azure/ad/app/permission?view=azure-cli-latest#az-ad-app-permission-grant-required-parameters
-
Anonymous
2022-12-14T10:12:46.22+00:00 Maybe I need to use a different command instead of ad?
-
Anonymous
2022-12-16T12:26:07.107+00:00 Could you please confirm if you tried above suggestion. Can you please confirm if 'az ad app permission grant' resolves your requirement?
-
Anonymous
2022-12-20T06:43:55.337+00:00 @Anonymous - Could you please confirm if you tried above suggestion. Can you please confirm if 'az ad app permission grant' resolves your requirement?
-
Anonymous
2022-12-20T11:25:01.853+00:00 Sorry, I had to be more precise in my last reply.
I have already given the scopes I need to my app.
It is for a configuration script that already uses az and set all the permissions we need. The problem is that I now need to give specific user-delegated permissions using the az command so to use the graph API to create online meetings.
To give that specific user permission to my app I can use:
Import-Module MicrosoftTeams Connect-MicrosoftTeams New-CsApplicationAccessPolicy -Identity myAPP-Link -AppIds "[my app id]" -Description "[description]" Grant-CsApplicationAccessPolicy -PolicyName myAPP-Link -Identity "[my user id]"but this requires an additional login procedure and I would like to only have 1 login procedure. And as the az commands are required, I am trying to do those New-CsApplicationAccessPolicy and Grant-CsApplicationAccessPolicy with the equivalent az command, if it is possible.
Please, Is it possible? Thank you!
-
Anonymous
2022-12-23T10:48:24.923+00:00 We are checking this internally. We will get back to you.
-
Anonymous
2023-01-05T10:23:52.69+00:00 @Anonymous - Engineering team has confirmed that we don't have az equivalent interface for the application access policies yet.
Sign in to comment
Sign in to answer