GDAP support
@shenglol 已经在做这个了。
开始于 2024年5月23日。
评估
这个 Issue 还没有评估数据。
描述
Is your feature request related to a problem? Please describe.
I would guess this is expected behavior that you cannot deploy Graph resources via GDAP. I will not explain what is GDAP in detail but in short in partner tenant and customer tenant. The partner tenant has group for example like AdminAgent. Via GDAP that group is given Entra access (for example User Administrator). In that group we have a user from the partner tenant. We also have service principal that can login to customer tenant by doing on behalf of that user so inherits its permissions on customer Entra tenant. This kind of login (via the service principal) works when we deploy Azure resources to the customer tenant. It also works if we do Graph operations via PowerShell. When we connect to the customer tenant with connect-azaccount we use -AccessToken property by providing access token that is valid. We also provide -GraphAccessToken but when I try to deploy Bicep template with Graph resources I get:
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| 06:39:52 - Error: Code=InvalidTemplateDeployment; Message=The template
| deployment 'azDeploy-240523063910-lz-ms-graph-test' is not valid
| according to the validation procedure. The tracking id is
| '30a48908-9bc7-4a24-bd7a-1dec585d5dab'. See inner errors for details.
| 06:39:52 - Error: Code=AuthenticationFailed; Message=Authentication
| failed. The deployment validation failed
As GDAP is common scenario for authenticating to customers by Cloud Solution Providers (CSPs) I think it is valid request that the Graph deployment supports it. Preferably should be possible with using the -GraphAccessToken -AccessToken parameters in connect-azaccount cmdlet.
Describe the solution you'd like
A clear and concise description of what you want to happen.
Additional context
Add any other context or screenshots about the feature request here.
- 主要语言
- TypeScript
- 星标
- 81
- 派生
- 15
- 平均合并
- 3 天 8 小时
- 30 天内合并 PR
- 7
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
microsoftgraph/msgraph-bicep-types 的其他 Issue
-
bug
难度 4/5 3-5 天 新手友好度 55/100
microsoftgraph/msgraph-bicep-types#311 · 3 条评论 ·
-
enhancement new type
难度 5/5 一周以上 新手友好度 45/100
-
enhancement
难度 4/5 3-5 天 新手友好度 35/100
microsoftgraph/msgraph-bicep-types#304 · 3 条评论 · 1 个 reaction ·
-
enhancement new type
难度 4/5 3-5 天 新手友好度 45/100
microsoftgraph/msgraph-bicep-types#296 · 2 个 reaction ·
-
Issue with servicePrincipals and appRoleAssignedTo in some Entra Tenants可能重新可做 @eketo-msft 于 261 天前认领，目前没有进行中的 PR。 未关闭bug
microsoftgraph/msgraph-bicep-types#275 · 5 条评论 · 已指派 1 人 ·
查看 microsoftgraph/msgraph-bicep-types 的全部 Issue
相似的 Issue
-
area/frontend good first issue kind/cooldown
难度 2/5 1-3 小时 新手友好度 78/100
维护者通常 1 天内回复
-
bug
难度 2/5 1-3 小时 新手友好度 85/100
voidzero-dev/oxc-angular-compiler#511 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 78/100
langchain-ai/deepagentsjs#898 · 1 条评论 ·
维护者通常 1 天内回复
-
难度 1/5 1 小时以内 新手友好度 92/100
anomalyco/models.dev#8509 · 2 条评论 ·
维护者通常 1 天内回复
-
bug documentation P2 UI/UX
难度 2/5 1-3 小时 新手友好度 85/100
维护者通常 1 天内回复