创建 delegatedPermissionClassification
命名空间:microsoft.graph
通过将 delegatedPermissionClassification 添加到表示 API 的 servicePrincipal ,对委派权限进行分类。
Permissions
要调用此 API,需要以下权限之一。要了解详细信息,包括如何选择权限的信息,请参阅权限。
| 权限类型 |
权限(从最低特权到最高特权) |
| 委派(工作或学校帐户) |
Policy.ReadWrite.PermissionGrant |
| 委派(个人 Microsoft 帐户) |
不支持。 |
| 应用程序 |
Policy.ReadWrite.PermissionGrant |
HTTP 请求
POST /servicePrincipals/{id}/delegatedPermissionClassifications
| 名称 |
说明 |
| Authorization |
Bearer {token}。必需。 |
| Content-type |
application/json. Required. |
请求正文
在请求正文中,提供 delegatedPermissionClassification 对象的 JSON 表示形式。
响应
如果成功,此方法在响应 201 Created 正文中返回 响应 代码和 delegatedPermissionClassification 对象。
示例
请求
在下面的示例中,委派权限"User.Read"被分类为"低"。
POST https://graph.microsoft.com/v1.0/servicePrincipals/{id}/delegatedPermissionClassifications
Content-Type: application/json
{
"permissionId": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
"permissionName": "User.Read",
"classification": "low"
}
GraphServiceClient graphClient = new GraphServiceClient( authProvider );
var delegatedPermissionClassification = new DelegatedPermissionClassification
{
PermissionId = "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
PermissionName = "User.Read",
Classification = PermissionClassificationType.Low
};
await graphClient.ServicePrincipals["{servicePrincipal-id}"].DelegatedPermissionClassifications
.Request()
.AddAsync(delegatedPermissionClassification);
有关如何将 SDK 添加 到项目并 创建 authProvider 实例的 详细信息,请参阅 SDK 文档。
const options = {
authProvider,
};
const client = Client.init(options);
const delegatedPermissionClassification = {
permissionId: 'e1fe6dd8-ba31-4d61-89e7-88639da4683d',
permissionName: 'User.Read',
classification: 'low'
};
await client.api('/servicePrincipals/{id}/delegatedPermissionClassifications')
.post(delegatedPermissionClassification);
有关如何将 SDK 添加 到项目并 创建 authProvider 实例的 详细信息,请参阅 SDK 文档。
MSHTTPClient *httpClient = [MSClientFactory createHTTPClientWithAuthenticationProvider:authenticationProvider];
NSString *MSGraphBaseURL = @"https://graph.microsoft.com/v1.0/";
NSMutableURLRequest *urlRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:[MSGraphBaseURL stringByAppendingString:@"/servicePrincipals/{id}/delegatedPermissionClassifications"]]];
[urlRequest setHTTPMethod:@"POST"];
[urlRequest setValue:@"application/json" forHTTPHeaderField:@"Content-Type"];
MSGraphDelegatedPermissionClassification *delegatedPermissionClassification = [[MSGraphDelegatedPermissionClassification alloc] init];
[delegatedPermissionClassification setPermissionId:@"e1fe6dd8-ba31-4d61-89e7-88639da4683d"];
[delegatedPermissionClassification setPermissionName:@"User.Read"];
[delegatedPermissionClassification setClassification: [MSGraphPermissionClassificationType low]];
NSError *error;
NSData *delegatedPermissionClassificationData = [delegatedPermissionClassification getSerializedDataWithError:&error];
[urlRequest setHTTPBody:delegatedPermissionClassificationData];
MSURLSessionDataTask *meDataTask = [httpClient dataTaskWithRequest:urlRequest
completionHandler: ^(NSData *data, NSURLResponse *response, NSError *nserror) {
//Request Completed
}];
[meDataTask execute];
有关如何将 SDK 添加 到项目并 创建 authProvider 实例的 详细信息,请参阅 SDK 文档。
GraphServiceClient graphClient = GraphServiceClient.builder().authenticationProvider( authProvider ).buildClient();
DelegatedPermissionClassification delegatedPermissionClassification = new DelegatedPermissionClassification();
delegatedPermissionClassification.permissionId = "e1fe6dd8-ba31-4d61-89e7-88639da4683d";
delegatedPermissionClassification.permissionName = "User.Read";
delegatedPermissionClassification.classification = PermissionClassificationType.LOW;
graphClient.servicePrincipals("{id}").delegatedPermissionClassifications()
.buildRequest()
.post(delegatedPermissionClassification);
有关如何将 SDK 添加 到项目并 创建 authProvider 实例的 详细信息,请参阅 SDK 文档。
//THE GO SDK IS IN PREVIEW. NON-PRODUCTION USE ONLY
graphClient := msgraphsdk.NewGraphServiceClient(requestAdapter)
requestBody := msgraphsdk.NewDelegatedPermissionClassification()
permissionId := "e1fe6dd8-ba31-4d61-89e7-88639da4683d"
requestBody.SetPermissionId(&permissionId)
permissionName := "User.Read"
requestBody.SetPermissionName(&permissionName)
classification := "low"
requestBody.SetClassification(&classification)
servicePrincipalId := "servicePrincipal-id"
result, err := graphClient.ServicePrincipalsById(&servicePrincipalId).DelegatedPermissionClassifications().Post(requestBody)
有关如何将 SDK 添加 到项目并 创建 authProvider 实例的 详细信息,请参阅 SDK 文档。
Import-Module Microsoft.Graph.Applications
$params = @{
PermissionId = "e1fe6dd8-ba31-4d61-89e7-88639da4683d"
PermissionName = "User.Read"
Classification = "low"
}
New-MgServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipalId -BodyParameter $params
有关如何将 SDK 添加 到项目并 创建 authProvider 实例的 详细信息,请参阅 SDK 文档。
响应
下面展示了示例响应。
注意: 为了提高可读性,可能缩短了此处显示的响应对象。
HTTP/1.1 201 Created
Content-type: application/json
{
"id": "2G3-4TG6YU2J54hjnaRoPQE",
"permissionId": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
"permissionName": "User.Read",
"classification": "low"
}