admin管理员组

文章数量:1406950

Problem: I am trying to implement RBAC for Azure Search Service. I need to deny/approve users access to index resources based on their role. I need to get access tokens for the users programmatically and use them as bearer when they interact with my api.

Tried/Expected/Actual:

  • I enabled role base access on my search service resource.
  • I created a new azure webapp with an endpoint.
  • I registered a new app in Microsoft Entra ID.
  • I set the Microsoft Entra Id redirect/response endpoint to a route on my hosted azure web app.
  • I used the "acquire token by authorization code" flow.
  • I had users authenticate at the generated authorize uri.
  • The user is redirected to the web app endpoint.
  • I was able to get an access token for microsoft.graph.User.read.
  • I was not able to get an access token for search.azure/.default
  • I was not able to find api permission in micrsoft entra id for azure search services

Article for Context - RBAC Article for Context - Acquire token by code flow

本文标签: microsoft entra idAzure RBAC User AuthenticationStack Overflow