删除 unifiedRoleDefinition
本文内容
命名空间:microsoft.graph
重要
Microsoft Graph版本下的 /beta API 可能会发生更改。 不支持在生产应用程序中使用这些 API。 若要确定 API 是否在 v1.0 中可用,请使用 版本 选择器。
删除 RBAC 提供程序的 unifiedRoleDefinition 对象。
目前支持以下 RBAC 提供程序:
云电脑
Intune (设备)
目录 (Azure AD)
权限
根据 RBAC 提供程序以及 (或应用程序) 的权限类型,从下表中选择调用此 API 所需的最低特权权限。 若要了解更多信息,包括在 选择 更多特权权限之前要谨慎,请参阅 权限 。
对于云电脑提供商
权限类型
权限(从最低特权到最高特权)
委派(工作或学校帐户)
RoleManagement.ReadWrite.CloudPC、CloudPC.ReadWrite.All
委派(个人 Microsoft 帐户)
不支持。
应用程序
RoleManagement.ReadWrite.CloudPC、CloudPC.ReadWrite.All
对于 Intune (提供程序的设备) 管理
权限类型
权限(从最低特权到最高特权)
委派(工作或学校帐户)
DeviceManagementRBAC.ReadWrite.All
委派(个人 Microsoft 帐户)
不支持。
应用程序
DeviceManagementRBAC.ReadWrite.All
对于目录 (Azure AD) 提供程序
权限类型
权限(从最低特权到最高特权)
委派(工作或学校帐户)
RoleManagement.ReadWrite.Directory、Directory.ReadWrite.All
委派(个人 Microsoft 帐户)
不支持。
应用程序
RoleManagement.ReadWrite.Directory、Directory.ReadWrite.All
HTTP 请求
若要删除设备管理提供程序的角色定义,请运行:
DELETE /roleManagement/deviceManagement/roleDefinitions/{id}
删除目录提供程序的角色定义:
DELETE /roleManagement/directory/roleDefinitions/{id}
若要删除云电脑提供商的角色定义,请运行:
DELETE /roleManagement/cloudPc/roleDefinitions/{id}
名称
说明
Authorization
持有者 {token}
请求正文
请勿提供此方法的请求正文。
响应
如果成功,此方法返回 204 No Content 响应代码。它不在响应正文中返回任何内容。
示例 1:删除目录提供程序的 unifiedRoleDefinition 资源
请求
DELETE https://graph.microsoft.com/beta/roleManagement/directory/roleDefinitions/f189965f-f560-4c59-9101-933d4c87a91a
GraphServiceClient graphClient = new GraphServiceClient( authProvider );
await graphClient.RoleManagement.Directory.RoleDefinitions["{unifiedRoleDefinition-id}"]
.Request()
.DeleteAsync();
const options = {
authProvider,
};
const client = Client.init(options);
await client.api('/roleManagement/directory/roleDefinitions/f189965f-f560-4c59-9101-933d4c87a91a')
.version('beta')
.delete();
MSHTTPClient *httpClient = [MSClientFactory createHTTPClientWithAuthenticationProvider:authenticationProvider];
NSString *MSGraphBaseURL = @"https://graph.microsoft.com/beta/";
NSMutableURLRequest *urlRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:[MSGraphBaseURL stringByAppendingString:@"/roleManagement/directory/roleDefinitions/f189965f-f560-4c59-9101-933d4c87a91a"]]];
[urlRequest setHTTPMethod:@"DELETE"];
MSURLSessionDataTask *meDataTask = [httpClient dataTaskWithRequest:urlRequest
completionHandler: ^(NSData *data, NSURLResponse *response, NSError *nserror) {
//Request Completed
}];
[meDataTask execute];
GraphServiceClient graphClient = GraphServiceClient.builder().authenticationProvider( authProvider ).buildClient();
graphClient.roleManagement().directory().roleDefinitions("f189965f-f560-4c59-9101-933d4c87a91a")
.buildRequest()
.delete();
//THE GO SDK IS IN PREVIEW. NON-PRODUCTION USE ONLY
graphClient := msgraphsdk.NewGraphServiceClient(requestAdapter)
unifiedRoleDefinitionId := "unifiedRoleDefinition-id"
graphClient.RoleManagement().Directory().RoleDefinitionsById(&unifiedRoleDefinitionId).Delete()
Import-Module Microsoft.Graph.DeviceManagement.Enrolment
Remove-MgRoleManagementDirectoryRoleDefinition -UnifiedRoleDefinitionId $unifiedRoleDefinitionId
响应
下面展示了示例响应。
HTTP/1.1 204 No Content
示例 2:删除云电脑提供商的 unifiedRoleDefinition 资源
请求
DELETE https://graph.microsoft.com/beta/roleManagement/cloudPc/roleDefinitions/b7f5ddc1-b7dc-4d37-abce-b9d6fc15ffff
GraphServiceClient graphClient = new GraphServiceClient( authProvider );
await graphClient.RoleManagement.CloudPC.RoleDefinitions["{unifiedRoleDefinition-id}"]
.Request()
.DeleteAsync();
const options = {
authProvider,
};
const client = Client.init(options);
await client.api('/roleManagement/cloudPc/roleDefinitions/b7f5ddc1-b7dc-4d37-abce-b9d6fc15ffff')
.version('beta')
.delete();
MSHTTPClient *httpClient = [MSClientFactory createHTTPClientWithAuthenticationProvider:authenticationProvider];
NSString *MSGraphBaseURL = @"https://graph.microsoft.com/beta/";
NSMutableURLRequest *urlRequest = [NSMutableURLRequest requestWithURL:[NSURL URLWithString:[MSGraphBaseURL stringByAppendingString:@"/roleManagement/cloudPc/roleDefinitions/b7f5ddc1-b7dc-4d37-abce-b9d6fc15ffff"]]];
[urlRequest setHTTPMethod:@"DELETE"];
MSURLSessionDataTask *meDataTask = [httpClient dataTaskWithRequest:urlRequest
completionHandler: ^(NSData *data, NSURLResponse *response, NSError *nserror) {
//Request Completed
}];
[meDataTask execute];
GraphServiceClient graphClient = GraphServiceClient.builder().authenticationProvider( authProvider ).buildClient();
graphClient.roleManagement().cloudPC().roleDefinitions("b7f5ddc1-b7dc-4d37-abce-b9d6fc15ffff")
.buildRequest()
.delete();
//THE GO SDK IS IN PREVIEW. NON-PRODUCTION USE ONLY
graphClient := msgraphsdk.NewGraphServiceClient(requestAdapter)
unifiedRoleDefinitionId := "unifiedRoleDefinition-id"
graphClient.RoleManagement().CloudPC().RoleDefinitionsById(&unifiedRoleDefinitionId).Delete()
Import-Module Microsoft.Graph.DeviceManagement.Enrolment
Remove-MgRoleManagementCloudPcRoleDefinition -UnifiedRoleDefinitionId $unifiedRoleDefinitionId
响应
下面展示了示例响应。
HTTP/1.1 204 No Content