Enumerar provisioningObjectSummaryList provisioningObjectSummary

Espacio de nombres: microsoft.graphNamespace: microsoft.graph

Importante

Las API de la /beta versión de Microsoft Graph están sujetas a cambios.APIs under the /beta version in Microsoft Graph are subject to change. No se admite el uso de estas API en aplicaciones de producción.Use of these APIs in production applications is not supported. Para determinar si una API está disponible en v 1.0, use el selector de versiones .To determine whether an API is available in v1.0, use the Version selector.

Obtenga todos los eventos de aprovisionamiento que se produjeron en su inquilino, como la eliminación de un grupo en una aplicación de destino o la creación de un usuario al aprovisionar cuentas de usuario desde el sistema de recursos humanos.Get all provisioning events that occurred in your tenant, such as the deletion of a group in a target application or the creation of a user when provisioning user accounts from your HR system.

PermisosPermissions

Se requiere uno de los siguientes permisos para llamar a esta API. Para obtener más información, incluido cómo elegir permisos, vea Permisos.One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Tipo de permisoPermission type Permisos (de menos a más privilegiados)Permissions (from least to most privileged)
Delegado (cuenta profesional o educativa)Delegated (work or school account) AuditLog. Read. All y Directory. Read. AllAuditLog.Read.All and Directory.Read.All
Delegado (cuenta personal de Microsoft)Delegated (personal Microsoft account) No admitidoNot supported
ApplicationApplication AuditLog.Read.AllAuditLog.Read.All

Solicitud HTTPHTTP request

GET /auditLogs/provisioning

Parámetros de consulta opcionalesOptional query parameters

Este método admite los siguientes parámetros de consulta de OData a modo de ayuda para personalizar la respuesta.This method supports the following OData query parameters to help customize the response. Tenga en cuenta que los filtros tienen distinción entre mayúsculas y minúsculas excepto estado.Note that the filters are all case sensitive except for status.

NombreName DescripciónDescription EjemploExample
$filter$filter Filtra los resultados (filas).Filters results (rows). /auditLogs/provisioning?$filter=id eq '74c3b0ae-9cc5-850e-e0a5-7r6a4231de87'
$top$top Establece el tamaño de la página de resultados.Sets the page size of results. /auditLogs/provisioning?$top=20
$skiptoken$skiptoken Recupera la siguiente página de resultados de conjuntos de resultados que abarcan varias páginas.Retrieves the next page of results from result sets that span multiple pages. Debe pasar el filtro superior en la consulta para generar el token.You must pass the top filter in the query to generate the token. No se puede especificar el número de resultados que se deben omitir.You cannot specify the number of results to be skipped. /auditLogs/provisioning?$top=20&$skiptoken=g822a72df43b19c8ce94b71d153981b680a08800bc3e35f239dffb378ff72c25"

Para obtener información general, vea Parámetros de consulta OData.For general information, see OData query parameters.

Atributos admitidos por el parámetro $filterAttributes supported by the $filter parameter

Nombre del atributoAttribute name Operadores admitidosSupported operators
idid EQ, contieneeq, contains
activityDateTimeactivityDateTime eqeq
tenantidtenantid EQ, contieneeq, contains
JobIDjobid EQ, contieneeq, contains
changeidchangeid EQ, contieneeq, contains
cycleidcycleid EQ, contieneeq, contains
acciónaction EQ, contieneeq, contains
statusInfo/estadostatusInfo/status EQ, contieneeq, contains
sourceSystem/displayNamesourceSystem/displayName EQ, contieneeq, contains
targetSystem/displayNametargetSystem/displayName EQ, contieneeq, contains
sourceIdentity/identityTypesourceIdentity/identityType EQ, contieneeq, contains
targetIdentity/identityTypetargetIdentity/identityType EQ, contieneeq, contains
sourceIdentity/IDsourceIdentity/id EQ, contieneeq, contains
servicePrincipal/IDservicePrincipal/id eqeq
servicePrincipal/nombreservicePrincipal/name eqeq
targetIdentity/IDtargetIdentity/id EQ, contieneeq, contains
sourceIdentity/displayNamesourceIdentity/displayName EQ, contieneeq, contains
targetIdentity/displayNametargetIdentity/displayName EQ, contieneeq, contains
initiatedBy/displayNameinitiatedBy/displayName EQ, contieneeq, contains

Encabezados de solicitudRequest headers

EncabezadoHeader ValorValue
AuthorizationAuthorization {token} de portador (obligatorio).Bearer {token} (required)

Cuerpo de solicitudRequest body

No proporcione un cuerpo de solicitud para este método.Do not supply a request body for this method.

RespuestaResponse

Si se ejecuta correctamente, este método devuelve un 200 OK código de respuesta y una colección de objetos provisioningObjectSummary en el cuerpo de la respuesta.If successful, this method returns a 200 OK response code and a collection of provisioningObjectSummary objects in the response body.

EjemplosExamples

Ejemplo 1: solicitud correctaExample 1: Successful request

SolicitudRequest

Aquí tiene un ejemplo de la solicitud.The following is an example of the request.

GET https://graph.microsoft.com/beta/auditLogs/provisioning

RespuestaResponse

El siguiente es un ejemplo de la respuesta para un evento correcto.The following is an example of the response for a successful event.

Nota: Se puede acortar el objeto de respuesta que se muestra aquí para mejorar la legibilidad.Note: The response object shown here might be shortened for readability. Se devolverán todas las propiedades de una llamada real.All the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-type: application/json

{
    
    "@odata.context": "https://graph.microsoft.com/beta/$metadata#auditLogs/provisioning",
    "value": [
         {
            "id": "75b5b0ae-9fc5-8d0e-e0a9-7y6a4728de56",
            "activityDateTime": "2019-05-04T03:00:54Z",
            "tenantId": "74beb175-3b80-7b63-b9d5-6f0b76082b16",
            "jobId": "aws.74beb1753b704b63b8d56f0b76082b16.10a7a801-7101-4c69-ae00-ce9f75f8460a",
            "cycleId": "b6502552-018d-79bd-8869-j47194dc65c1",
            "changeId": "b6502552-018d-89bd-9969-b49194dc65c1",
            "action": "EntryExportUpdate",
            "durationInMilliseconds": 3236,
            "statusInfo": {
                "status": "success"
            },
            "provisioningSteps": [
                {
                    "name": "EntryImport",
                    "provisioningStepType": "Import",
                    "status": "success",
                    "description": "Retrieved RolesCompound '10a7a801-7101-4c69-ae00-ce9f75f8460a' from Contoso",
                    "details": {}
                },
                {
                    "name": "EntryExportUpdate",
                    "provisioningStepType": "Export",
                    "status": "success",
                    "description": "RolesCompound '60a7a801-7101-4c69-ae00-ce9f75f8460a' was updated in Azure Active Directory",
                    "details": {
                        "ReportableIdentifier": "60a7a801-7101-4c69-ae00-ce9f75f8460a"
                    }
                }
            ],
            "modifiedProperties": [
                {
                    "displayName": "appId",
                    "oldValue": null,
                    "newValue": "60a7a801-7101-4c69-ae00-ce9f75f8460a"
                },
                {
                    "displayName": "Roles",
                    "oldValue": null,
                    "newValue": "jaws-prod-role2,jaws-prod-saml2, jayaws-role,jayaws-saml, TestRole,super-saml"
                },
                {
                    "displayName": "objectId",
                    "oldValue": null,
                    "newValue": "6nn37b93-185a-4485-a519-50c09549f3ad"
                },
                {
                    "displayName": "displayName",
                    "oldValue": null,
                    "newValue": "Contoso"
                },
                {
                    "displayName": "homepage",
                    "oldValue": null,
                    "newValue": "https://signin.contoso.com/saml?metadata=contoso|ISV9.1|primary|z"
                },
            ],
            "servicePrincipal": {
                "id": "6cc35b93-185a-4485-a519-50c09549g3ad",
                "displayName": "Contoso"
            },
            "sourceSystem": {
                "id": "d1e090e1-f2f4-4678-be44-6442ffff0621",
                "displayName": "Contoso",
                "details": {}
            },
            "targetSystem": {
                "id": "e69d4bd2-2da2-483e-bc49-aad4080b91b3",
                "displayName": "Azure Active Directory",
                "details": {
                    "ApplicationId": "bcf4d658-ac9f-408d-bf04-e86dc10328fb",
                    "ServicePrincipalId": "6nn35b93-185a-4485-a519-50c09549f3ad",
                    "ServicePrincipalDisplayName": "Contoso"
                }
            },
            "initiatedBy": {
                "initiatingType": "System",
                "id": "",
                "displayName": "Azure AD Provisioning Service"
            },
            "sourceIdentity": {
                "identityType": "RolesCompound",
                "id": "60a7a801-7101-4c69-ae00-ce9f75f8460a",
                "displayName": "",
                "details": {}
            },
            "targetIdentity": {
                "identityType": "ServicePrincipal",
                "id": "6nn35b93-185a-4485-a519-50c09549f3ad",
                "displayName": "",
                "details": {}
            }
          }
    ]
}

Ejemplo 2: respuesta de errorExample 2: Error reponse

SolicitudRequest

Aquí tiene un ejemplo de la solicitud.The following is an example of the request.

GET https://graph.microsoft.com/beta/auditLogs/provisioning

RespuestaResponse

El siguiente es un ejemplo de la respuesta a un evento de aprovisionamiento que ha fallado.The following is an example of the response for a failed provisioning event.

Nota: Se puede acortar el objeto de respuesta que se muestra aquí para mejorar la legibilidad. Se devolverán todas las propiedades de una llamada real.Note: The response object shown here might be shortened for readability. All the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-type: application/json

{
    "@odata.context": "https://graph.microsoft.com/beta/$metadata#auditLogs/provisioning",
    "value": [
        {
            "id": "gc532ff9-r265-ec76-861e-42e2970a8218",
            "activityDateTime": "2019-06-24T20:53:08Z",
            "tenantId": "7928d5b5-7442-4a97-ne2d-66f9j9972ecn",
            "jobId": "ContosoOutDelta.7928d5b574424a97ne2d66f9j9972ecn",
            "cycleId": "44576n58-v14b-70fj-8404-3d22tt46ed93",
            "changeId": "eaad2f8b-e6e3-409b-83bd-e4e2e57177d5",
            "action": "Create",
            "durationInMilliseconds": 2785,
            "sourceSystem": {
                "id": "0404601d-a9c0-4ec7-bbcd-02660120d8c9",
                "displayName": "Azure Active Directory",
                "details": {}
            },
            "targetSystem": {
                "id": "cd22f60b-5f2d-1adg-adb4-76ef31db996b",
                "displayName": "Contoso",
                "details": {
                    "ApplicationId": "f2764360-e0ec-5676-711e-cd6fc0d4dd61",
                    "ServicePrincipalId": "chc46a42-966b-47d7-9774-576b1c8bd0b8",
                    "ServicePrincipalDisplayName": "Contoso"
                }
            },
            "initiatedBy": {
                "id": "",
                "displayName": "Azure AD Provisioning Service",
                "initiatorType": "system"
            },
            "servicePrincipal": {
                "id": "chc46a42-966b-47d7-9774-576b1c8bd0b8",
                "displayName": "Contoso"
            },
            "sourceIdentity": {
                "id": "5e6c9rae-ab4d-5239-8ad0-174391d110eb",
                "displayName": "Self-service Pilot",
                "identityType": "Group",
                "details": {}
            },
            "targetIdentity": {
                "id": "",
                "displayName": "",
                "identityType": "Group",
                "details": {}
            },
            "statusInfo": {
                "@odata.type": "#microsoft.graph.statusDetails",
                "status": "failure",
                "errorCode": "ContosoEntryConflict",
                "reason": "Message: Contoso returned an error response with the HTTP status code 409.  This response indicates that a user or a group already exisits with the same name. This can be avoided by identifying and removing the conflicting user from Contoso via the Contoso administrative user interface, or removing the current user from the scope of provisioning either by removing their assignment to the Contoso application in Azure Active Directory or adding a scoping filter to exclude the user.",
                "additionalDetails": null,
                "errorCategory": "NonServiceFailure",
                "recommendedAction": null
            },
            "provisioningSteps": [
                {
                    "name": "EntryImportAdd",
                    "provisioningStepType": "import",
                    "status": "success",
                    "description": "Received Group 'Self-service Pilot' change of type (Add) from Azure Active Directory",
                    "details": {}
                },
                {
                    "name": "EntrySynchronizationAdd",
                    "provisioningStepType": "matching",
                    "status": "success",
                    "description": "Group 'Self-service Pilot' will be created in Contoso (Group is active and assigned in Azure Active Directory, but no matching Group was found in Contoso)",
                    "details": {}
                },
                {
                    "name": "EntryExportAdd",
                    "provisioningStepType": "export",
                    "status": "failure",
                    "description": "Failed to create Group 'Self-service Pilot' in Contoso",
                    "details": {
                        "ReportableIdentifier": "Self-service Pilot"
                    }
                }
            ],
            "modifiedProperties": [
                {
                    "displayName": "objectId",
                    "oldValue": null,
                    "newValue": "5e0c9eae-ad3d-4139-5ad0-174391d110eb"
                },
                {
                    "displayName": "displayName",
                    "oldValue": null,
                    "newValue": "Self-service Pilot"
                },
                {
                    "displayName": "mailEnabled",
                    "oldValue": null,
                    "newValue": "False"
                },
                {
                    "displayName": "mailNickname",
                    "oldValue": null,
                    "newValue": "5ce25n9a-4c5f-45c9-8362-ef3da29c66c5"
                },
                {
                    "displayName": "securityEnabled",
                    "oldValue": null,
                    "newValue": "True"
                },
                {
                    "displayName": "Name",
                    "oldValue": null,
                    "newValue": "Self-service Pilot"
                }
            ]
       }
    ]
}