GraphScope interface
Container where a graph entity is defined (organization, project, team)
- Extends
administrator |
The subject descriptor that references the administrators group for this scope. Only members of this group can change the contents of this scope or assign other users permissions to access this scope. |
is |
When true, this scope is also a securing host for one or more scopes. |
parent |
The subject descriptor for the closest account or organization in the ancestor tree of this scope. |
scope |
The type of this scope. Typically ServiceHost or TeamProject. |
securing |
The subject descriptor for the containing organization in the ancestor tree of this scope. |
descriptor | The descriptor is the primary way to reference the graph subject while the system is running. This field will uniquely identify the same graph subject across both Accounts and Organizations. |
display |
This is the non-unique display name of the graph subject. To change this field, you must alter its value in the source provider. |
legacy |
[Internal Use Only] The legacy descriptor is here in case you need to access old version IMS using identity descriptor. |
origin | The type of source provider for the origin identifier (ex:AD, AAD, MSA) |
origin |
The unique identifier from the system of origin. Typically a sid, object id or Guid. Linking and unlinking operations can cause this value to change for a user because the user is not backed by a different provider and has a different unique id in the new provider. |
subject |
This field identifies the type of the graph subject (ex: Group, Scope, User). |
url | This url is the full route to the source resource of this graph subject. |
The subject descriptor that references the administrators group for this scope. Only members of this group can change the contents of this scope or assign other users permissions to access this scope.
administratorDescriptor: string
Property Value
string
When true, this scope is also a securing host for one or more scopes.
isGlobal: boolean
Property Value
boolean
The subject descriptor for the closest account or organization in the ancestor tree of this scope.
parentDescriptor: string
Property Value
string
The type of this scope. Typically ServiceHost or TeamProject.
scopeType: GroupScopeType
Property Value
The subject descriptor for the containing organization in the ancestor tree of this scope.
securingHostDescriptor: string
Property Value
string
The descriptor is the primary way to reference the graph subject while the system is running. This field will uniquely identify the same graph subject across both Accounts and Organizations.
descriptor: string
Property Value
string
Inherited From GraphSubject.descriptor
This is the non-unique display name of the graph subject. To change this field, you must alter its value in the source provider.
displayName: string
Property Value
string
Inherited From GraphSubject.displayName
[Internal Use Only] The legacy descriptor is here in case you need to access old version IMS using identity descriptor.
legacyDescriptor: string
Property Value
string
Inherited From GraphSubject.legacyDescriptor
The type of source provider for the origin identifier (ex:AD, AAD, MSA)
origin: string
Property Value
string
Inherited From GraphSubject.origin
The unique identifier from the system of origin. Typically a sid, object id or Guid. Linking and unlinking operations can cause this value to change for a user because the user is not backed by a different provider and has a different unique id in the new provider.
originId: string
Property Value
string
Inherited From GraphSubject.originId
This field identifies the type of the graph subject (ex: Group, Scope, User).
subjectKind: string
Property Value
string
Inherited From GraphSubject.subjectKind
This url is the full route to the source resource of this graph subject.
url: string
Property Value
string
Inherited From GraphSubject.url