requestorSettings resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Used for the requestorSettings property of an access package assignment policy. Provides additional settings to select who can create a request for an access package on that policy.

Who can request scopeType allowedRequestors collection
No one NoSubjects empty array
Specific individual user in your directory SpecificDirectorySubjects singleUser
Users in your directory who are members of a group SpecificDirectorySubjects groupMembers
Users in your directory with userType value of member AllExistingDirectoryMemberUsers empty array
Users in your directory AllExistingDirectorySubjects empty array
Users in specific connected organizations SpecificConnectedOrganizationSubjects connectedOrganizationMembers
Users from any connected organizations that have the state property of the connected organization set to configured. AllConfiguredConnectedOrganizationSubjects empty array
Any user AllExternalSubjects empty array

Properties

Property Type Description
scopeType String Who can request. One of NoSubjects, SpecificDirectorySubjects, SpecificConnectedOrganizationSubjects, AllConfiguredConnectedOrganizationSubjects, AllExistingConnectedOrganizationSubjects, AllExistingDirectoryMemberUsers, AllExistingDirectorySubjects or AllExternalSubjects.
acceptRequests Boolean Indicates whether new requests are accepted on this policy.
allowedRequestors userSet collection The users who are allowed to request on this policy, which can be singleUser, groupMembers, and connectedOrganizationMembers.

JSON representation

The following is a JSON representation of the requestorSettings property of a policy, which allows the members of a group to request.

{
  "scopeType": "SpecificDirectorySubjects",
  "acceptRequests": true,
  "allowedRequestors": [
       {
         "@odata.type": "#microsoft.graph.groupMembers",
         "isBackup": false,
         "id": "string (identifier)",
         "description": "Authorized requestors"
       }
   ]
}