POST /:tenantID/oauth2PermissionGrants — graphrbacmanagementclient

Application6

ApplicationKeyCredentials2

ApplicationOwners3

ApplicationPasswordCredentials2

deletedApplications2

Domain2

Group9

GroupOwners1

GroupsOwners2

OAuth2PermissionGrant_Create1

post/{tenantID}/oauth2PermissionGrants

OAuth2PermissionGrant_delete1

OAuth2PermissionGrant_List1

Objects1

ServicePrincipal5

ServicePrincipalAppRoleAssignedTo1

ServicePrincipalAppRoleAssignments1

ServicePrincipalKeyCredentials2

ServicePrincipalOwners3

ServicePrincipalPasswordCredentials2

ServicePrincipalsByAppId1

SignedInUser2

User6

OAuth2PermissionGrant_Create

Grants OAuth2 permissions for the relevant resource Ids of an app.

post/{tenantID}/oauth2PermissionGrants

Path parameters

tenantIDstring required

The tenant ID.

Query parameters

api-versionstring required

Client API version.

Request body

odata.typestring

Microsoft.DirectoryServices.OAuth2PermissionGrant

clientIdstring

The id of the resource's service principal granted consent to impersonate the user when accessing the resource (represented by the resourceId property).

objectIdstring

The id of the permission grant

consentType'AllPrincipals' | 'Principal'

Indicates if consent was provided by the administrator (on behalf of the organization) or by an individual.

principalIdstring

When consent type is Principal, this property specifies the id of the user that granted consent and applies only for that user.

resourceIdstring

Object Id of the resource you want to grant

scopestring

Specifies the value of the scope claim that the resource application should expect in the OAuth 2.0 access token. For example, User.Read

startTimestring

Start time for TTL

expiryTimestring

Expiry time for TTL

Example request

{
  "odata.type": "odata.type",
  "resourceId": "resourceId",
  "clientId": "clientId",
  "scope": "scope",
  "expiryTime": "expiryTime",
  "consentType": "consentType",
  "principalId": "",
  "startTime": "startTime"
}

Response

OK. The operation was successful.