Admin rights for Azure AD Connector

(0) Share

Report

Posted on by Community Power Pla...

I feel like this has been posted a million times.
here and here
But it is still unclear to me....

The issue is this connector

I do understand I need the following permissions

Group.ReadWrite.All
User.ReadWrite.All
Directory.ReadWrite.All

But where do I find these permissions?
I read the documentation but it seems like microsoft skipped out the most important parts. The description looks like something you would find in a CLI environment but Mircrosoft is all GUI. Why not add a nice picture? I have been looking all over portal.azure.com to find these settings.

Categories:

Using connectors

I have the same question (0)

All responses (2)

Answers (1)

Community Power Pla... on at

Like (0)

Report

Update: I am a huge step further now (Problem is not solved yet). In hopes this helps someone:

Azure AD uses the Graph API to connect to the stored data. So I know where to find the settings for the three mandatory permissions.
But how does it work? Is this Account bound? Do I need API tokens?
One cannot simply click on save to proceed. The button is disabled.

Edit: This was a false approach the permissions are not globally but only locally in the app.

Was this reply helpful? Yes No
Verified answer

Community Power Pla... on at

Like (1)

Report

I solved the problem now. The Azure AD admin gave me "grant admin" consens on behalf of the organisation. We did it via the login button on the Azure AD connector.

The background: On portal.azure.com Home/<CompanyName> in the menu "app-registrations" --> then "all applications". A new app is automatically created and the three permission mentioned in the documentation are automatically added. This is by far the easiest solution. Microsoft could communicate this more detailed in their documentation.

Alternatively you can create the app manually and add the permissions. But this is a story for another day.
Recommend this tutorial: https://learn.microsoft.com/en-us/graph/tutorials/power-automate?tabs=blank&tutorial-step=1

Have a great day 🙂

Was this reply helpful? Yes No