當我運行appRoleAssignments時，它返回不清楚的響應

Question

我試圖將appRole分配給servicePrincipal並得到一些奇怪的響應：url為https://graph.microsoft.com/beta/servicePrincipals/ {id} / appRoleAssignments與

{
  "principalDisplayName": "[displayName]",
  "principalId": "[Guid]",
  "principalType": "ServicePrincipal",
  "resourceDisplayName": "Microsoft.Azure.ActiveDirectory",
  "resourceId": "a774ef19-d0c7-4305-8317-8aa6a1f06634"
} 

這是回應

{
    "error": {
        "code": "BadRequest",
        "message": "Write requests are only supported on contained entities",
        "innerError": {
            "request-id": "2be2ae24-a9d9-4699-b72a-68f2feb12f8d",
            "date": "2017-08-17T18:10:07"
        }
    }
}

如果我使用相同的請求正文將URL更改為https://graph.microsoft.com/beta/appRoleAssignments ，它將返回

{
    "error": {
        "code": "Request_ResourceNotFound",
        "message": "Resource 'CBVUPR3WYk-2780vOjxKdw' does not exist or one of its queried reference-property objects are not present.",
        "innerError": {
            "request-id": "9b1aaae6-3178-4db3-8a2b-1a025d69bbda",
            "date": "2017-08-17T18:18:05"
        }
    }
}

有什么想法嗎？

謝謝

Answer 1

不幸的是，我認為目前這是很不完善的。 該API有一個主要的錯誤-該API不會為您提供一種設置您要分配的appRoleId的方法。 我沒有預計何時解決的ETA。 同時，AAD Graph API是唯一可用的選項。

希望這可以幫助，