Search code examples
azureazure-active-directorymicrosoft-graph-apiazure-managed-identityibm-api-management

Give permissions to graph api in enterprise application Azure AD

I have an Enterprise Application(which uses Graph api) in Azure Ad which was created from System assigned managed identity. This application was not showing in App Registration. How to add Graph Api permissions to Enterprise application?

I am getting the error "Insufficient privileges to complete the operation."

Please help me.

Solution

  • As far as I know, we can not add permissions to app when you open it in enterprise application. And according to my test, if we just enable the status of System assigned from "off" to "on", we can just find it when choose "All applications"(shown as below screenshot). enter image description here

    If you want to add permissions to the app, you need to register it in azure ad. You can follow the steps in this tutorial or refer the step I provide below:

    1. Go to your app and click "Authentication/Authorization" --> enable "App Service Authentication" --> "Azure Active Directory". enter image description here

    2. Then you can create your app in azure ad. enter image description here

    3. After that, you can go to azure ad "App registrations" and find your app, add permissions to it.