question

DelroyMcKenzieITServices-2059 avatar image
0 Votes"
DelroyMcKenzieITServices-2059 asked FionaYan-MSFT commented

Configuration Manager CMG - Azure Native app and user impersonation - why exaclty is this needed ?

Hi all, Just wondering if any one can explain exactly why 'User Impersonation' is configured in the API Permissions for the CMG Native/Client App. Its detailed here how to enable it, but cannot find a statement indicting WHY it is needed. Look at ( 6 c) https://docs.microsoft.com/en-us/mem/configmgr/core/clients/manage/cmg/manually-register-azure-ad-apps#register-the-native-client-app ![49177-image.png][1] [1]: /answers/storage/attachments/49177-image.png Note: user.imperosanation is enabled when these apps are created automatically as part of the CMG setup process

azure-ad-authenticationmem-cm-site-deploymentazure-ad-graph
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

FionaYan-MSFT avatar image
1 Vote"
FionaYan-MSFT answered FionaYan-MSFT commented

anonymous user

Thank you for posting in Microsoft Q&A forum.

On the API Permissions page, Azure Service Management is listed in the API permissions list with Delegated permissions for user_impersonation. The permission you have given the app allows it to get an access token to that app in order to call its APIs. And since it is a delegated permission, this app can do this on behalf of the signed-in user, so the token will contain the info for the app that asked for the token as well as the user. (The token is only usable against the app that defined the user_impersonation scope.)

Have a good day!


If the response is helpful, please click "Accept Answer" and up vote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

anonymous user

May we know the current status of the question? If there is any other assistance we can provide, please feel free to let us know, we will do our best to help you.

0 Votes 0 ·