Azure Active Directory 组/角色

Question

I am trying to figure out how to create a windows azure active directory group and/or role from the web portal. Am I missing something obvious here or? I can create users, and assign them to the 2 built in roles, but how do I create a new role? or group?

Answer 1

Admittedly I haven't tried this yet, but the PowerShell extensions should be able to do this:

http://technet.microsoft.com/en-us/library/jj151815.aspx

Look under "Manage group and role membership" for details on the relevant commands.

I would also assume that the Graph API could handle it. I too was hoping that the Azure Management Portal would let us do it in their GUI.

Answer 2

Seems the way to add groups, etc is via the graph api or as suggested above by PS scripts. The graph api is amazingly powerful, albeit not as convenient as if this funcitonality lived within the Azure portal.

Answer 3

Basically you have 2 options:

1. create app roles and assign security groups to them (AAD Premium is required)
2. enable security groups as claims (AAD Free is enough)

Follow this official manual: https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-add-app-roles-in-azure-ad-apps