How to set service tree properties with graph API via bicep template

Question

I am creating extra ID via bicep template . However, I can't find any service tree properties in the graph api... which will easy to lead to security compliance issue.

can anyone share your idea?

resource entraApp 'Microsoft.Graph/applications@v1.0' = {
  displayName: entraAppDisplayName
  uniqueName: entraAppUniqueName
  web: {
    redirectUris: [
      apimOauthCallback
    ]
  }
  api: {
    oauth2PermissionScopes: exposedScopes
    requestedAccessTokenVersion: 2
    preAuthorizedApplications: [
      {
        appId: publicClientIdOauthSignin
        delegatedPermissionIds: [
          exposedScopes[0].id
        ]
      }
    ]
  }
  requiredResourceAccess: [
    {
      resourceAppId: '00000003-0000-0000-c000-000000000000'
      resourceAccess: [
        {
          id: 'e1fe6dd8-ba31-4d61-89e7-88639da4683d' // User.Read
          type: 'Scope'
        }
      ]
    }
  ]

Answer 1

Use the 'serviceManagementReference' property