enumeratedPreApprovedPermissions resource type
Namespace: microsoft.graph.enumeratedPreApprovedPermissions
Important
APIs under the /beta
version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
This type is used in the conditions of a permissionGrantPreApprovalPolicy to indicate that only the permissions explicitly included in the policy are allowed for consent. If the client application requests more permissions after the policy is created, the policy will not apply.
Inherits from preApprovePermissions.
Properties
Property | Type | Description |
---|---|---|
permissionIds | String collection | The list of id values for the specific resource-specific application permissions to match with. See the resourceSpecificApplicationPermissions property of the servicePrincipal object for the list of permissions. |
permissionKind | permissionKind | Inherited from preapprovedpermissions. Indicates the scope of permissions that are included in this condition set. Only enumerated is supported to indicate that only a selected set of permissions from a single resource application are allowed. Required. |
permissionType | permissionType | The type of permission being granted. Possible values: application for application permissions (app roles), or delegated for delegated permissions. Inherited from preapprovedpermissions. Required. |
resourceApplicationId | String | The appId of the resource application (the API). Required. |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.enumeratedPreApprovedPermissions",
"permissionKind": "String",
"permissionType": "String",
"permissionIds": [
"String"
],
"resourceApplicationId": "String"
}