how to enable editing of the attribute and claims as it is greyed out for me

Question

how to enable editing of the attribute and claims as it is greyed out for me

Manju Dharani 0

unable to edit the attribute ad claims

Manju Dharani 0 Reputation points

2023-04-21T12:53:57.1766667+00:00
David Wiklund 0 Reputation points

2023-04-21T13:19:34.9533333+00:00

Check that you are assigned the attribute definition administrator role. By default, Global administrator and privileged role administrator roles do not have permissions to read or add custom security attributes.
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-04-28T12:11:03.3266667+00:00

Hi @Manju Dharani ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

Manju Dharani 0 Reputation points

2023-04-21T12:53:57.1766667+00:00
David Wiklund 0 Reputation points

2023-04-21T13:19:34.9533333+00:00

Check that you are assigned the attribute definition administrator role. By default, Global administrator and privileged role administrator roles do not have permissions to read or add custom security attributes.
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-04-28T12:11:03.3266667+00:00

Hi @Manju Dharani ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Hi @Manju Dharani ,

Thanks for reaching out.

I understand you are trying to add new attributes and claims to your application, but the option is greyed out.

This is because there are claims defined using claim mapping policy through Graph or PowerShell. You need to remove any claim mapping policy from your applications to define new claims and attributes here.

You can check any existing claim mapping policy defined in your application using PowerShell commands.

Connect-AzureAD
Get-AzureADServicePrincipalPolicy -Id "<objectIdofServicePrincipal>" which will provide the claim mapping policy associated with this application along with the policy id.

User's image

You can remove claim mapping policy using

Remove-AzureADServicePrincipalPolicy -Id "<objectIdofServicePrincipal>" -PolicyId 79388d04-0bcc-457e-af22-6421bb4fbd66

Once the claim mapping policy has been removed from the application, you will get an option to add new claims.

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.

Share via

how to enable editing of the attribute and claims as it is greyed out for me

1 answer

Your answer