Namespace: microsoft.graph
Wichtig
Die APIs unter der /beta Version in Microsoft Graph können sich ändern. Die Verwendung dieser APIs in Produktionsanwendungen wird nicht unterstützt. Um festzustellen, ob eine API in v1.0 verfügbar ist, verwenden Sie die Version Selektor.
Setzen Sie die Zugriffspaketanforderung eines Benutzers fort, nachdem auf einen Rückruf von einer benutzerdefinierten Erweiterung gewartet wurde.
Wenn in der Berechtigungsverwaltung von Microsoft Entra eine Zugriffspaketrichtlinie für den Aufruf einer benutzerdefinierten Erweiterung aktiviert wurde und die Bearbeitung der Anforderung auf den Rückruf des Kunden wartet, kann der Kunde eine Fortsetzungsaktion initiieren. Sie wird für ein accessPackageAssignmentRequest-Objekt ausgeführt, dessen requestStatus sich in einem Zustand befindet WaitingForCallback .
Diese API ist in den folgenden nationalen Cloudbereitstellungen verfügbar.
| Weltweiter Service |
US Government L4 |
US Government L5 (DOD) |
China, betrieben von 21Vianet |
| ✅ |
✅ |
✅ |
✅ |
Berechtigungen
Wählen Sie die Berechtigungen aus, die für diese API als am wenigsten privilegiert markiert sind. Verwenden Sie eine höhere Berechtigung oder Berechtigungen nur, wenn Ihre App dies erfordert. Ausführliche Informationen zu delegierten Berechtigungen und Anwendungsberechtigungen finden Sie unter Berechtigungstypen. Weitere Informationen zu diesen Berechtigungen finden Sie in der Berechtigungsreferenz.
| Berechtigungstyp |
Berechtigungen mit den geringsten Berechtigungen |
Berechtigungen mit höheren Berechtigungen |
| Delegiert (Geschäfts-, Schul- oder Unikonto) |
EntitlementManagement.ReadWrite.All |
Nicht verfügbar. |
| Delegiert (persönliches Microsoft-Konto) |
Nicht unterstützt |
Nicht unterstützt |
| Application |
EntitlementManagement.ReadWrite.All |
Nicht verfügbar. |
Tipp
Für den delegierten Zugriff mit Geschäfts-, Schul- oder Unikonten muss dem angemeldeten Benutzer eine Administratorrolle mit unterstützten Rollenberechtigungen über eine der folgenden Optionen zugewiesen werden:
- Eine Rolle im Berechtigungsverwaltungssystem , bei der die Rollen mit den geringsten Berechtigungen sind:
-
Greifen Sie auf den Paketzuweisungs-Manager zu.
Dies ist die Option mit den geringsten Berechtigungen
-
Zugriff auf Paket-Manager
- Katalogbesitzer
- Weitere privilegierte Microsoft Entra-Rollen, die für diesen Vorgang unterstützt werden:
- Identity Governance Administrator
In reinen App-Szenarien kann der aufrufenden App anstelle der EntitlementManagement.ReadWrite.All Anwendungsberechtigung eine der oben genannten unterstützten Rollen zugewiesen werden. Die Rolle des Zugriffspaketzuweisungs-Managers ist weniger privilegiert als die EntitlementManagement.ReadWrite.All Anwendungsberechtigung.
Weitere Informationen finden Sie unter Delegierung und Rollen in der Berechtigungsverwaltung und Delegieren der Zugriffsgovernance an Zugriffspaket-Manager in der Berechtigungsverwaltung.
HTTP-Anforderung
Hinweis
Der /accessPackageAssignmentRequests Pfad wird bald eingestellt. Verwenden Sie stattdessen den /assignmentRequests-Pfad.
POST /identityGovernance/entitlementManagement/assignmentRequests/{accessPackageAssignmentRequestId}/resume
POST /identityGovernance/entitlementManagement/accessPackageAssignmentRequests/{accessPackageAssignmentRequestId}/resume
Anforderungstext
Geben Sie im Anforderungstext eine JSON-Darstellung der Parameter an.
In der folgenden Tabelle sind die Parameter aufgeführt, die mit dieser Aktion verwendet werden können.
| Parameter |
Typ |
Beschreibung |
| source |
Zeichenfolge |
Quelle, von der aus der Kunde versucht, die Anforderung fortzusetzen, die im Dienst gespeichert werden kann und für die Überwachung hilfreich ist. |
| type |
Zeichenfolge |
Geben Sie an, in welcher Phase die benutzerdefinierte Popuperweiterung ausgeführt wurde. Die möglichen Werte sind: microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated, microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestApproved, microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestGranted, microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestRemoved |
| data |
accessPackageAssignmentRequestCallbackData |
Enthält Informationen zur Instance des Popups, das an den Kundenendpunkt gesendet wurde. |
Antwort
Wenn die Aktion erfolgreich verläuft, wird der Antwortcode 204 No Content zurückgegeben.
Beispiele
Beispiel 1: Fortsetzen einer Zugriffspaketzuweisungsanforderung
Anforderung
Das folgende Beispiel zeigt eine Anforderung eines Aufrufs zum Fortsetzen einer Zugriffspaketzuweisungsanforderung, die auf einen Rückruf wartet.
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageAssignmentRequests/0e60f18c-b2a0-4887-9da8-da2e30a39d99/resume
Content-Type: application/json
{
"source": "Contoso.SodCheckProcess",
"type": "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
"data": {
"@odata.type": "microsoft.graph.accessPackageAssignmentRequestCallbackData",
"stage": "assignmentRequestCreated",
"customExtensionStageInstanceId": "957d0c50-466b-4840-bb5b-c92cea7141ff",
"customExtensionStageInstanceDetail": "This user is all verified"
}
}
// Code snippets are only available for the latest version. Current version is 5.x
// Dependencies
using Microsoft.Graph.Beta.IdentityGovernance.EntitlementManagement.AccessPackageAssignmentRequests.Item.Resume;
using Microsoft.Graph.Beta.Models;
var requestBody = new ResumePostRequestBody
{
Source = "Contoso.SodCheckProcess",
Type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
Data = new AccessPackageAssignmentRequestCallbackData
{
OdataType = "microsoft.graph.accessPackageAssignmentRequestCallbackData",
Stage = AccessPackageCustomExtensionStage.AssignmentRequestCreated,
CustomExtensionStageInstanceId = "957d0c50-466b-4840-bb5b-c92cea7141ff",
CustomExtensionStageInstanceDetail = "This user is all verified",
},
};
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.IdentityGovernance.EntitlementManagement.AccessPackageAssignmentRequests["{accessPackageAssignmentRequest-id}"].Resume.PostAsync(requestBody);
// Code snippets are only available for the latest major version. Current major version is $v0.*
// Dependencies
import (
"context"
msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
graphidentitygovernance "github.com/microsoftgraph/msgraph-beta-sdk-go/identitygovernance"
graphmodels "github.com/microsoftgraph/msgraph-beta-sdk-go/models"
//other-imports
)
requestBody := graphidentitygovernance.NewResumePostRequestBody()
source := "Contoso.SodCheckProcess"
requestBody.SetSource(&source)
type := "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated"
requestBody.SetType(&type)
data := graphmodels.NewAccessPackageAssignmentRequestCallbackData()
stage := graphmodels.ASSIGNMENTREQUESTCREATED_ACCESSPACKAGECUSTOMEXTENSIONSTAGE
data.SetStage(&stage)
customExtensionStageInstanceId := "957d0c50-466b-4840-bb5b-c92cea7141ff"
data.SetCustomExtensionStageInstanceId(&customExtensionStageInstanceId)
customExtensionStageInstanceDetail := "This user is all verified"
data.SetCustomExtensionStageInstanceDetail(&customExtensionStageInstanceDetail)
requestBody.SetData(data)
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
graphClient.IdentityGovernance().EntitlementManagement().AccessPackageAssignmentRequests().ByAccessPackageAssignmentRequestId("accessPackageAssignmentRequest-id").Resume().Post(context.Background(), requestBody, nil)
// Code snippets are only available for the latest version. Current version is 6.x
GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);
com.microsoft.graph.beta.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.ResumePostRequestBody resumePostRequestBody = new com.microsoft.graph.beta.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.ResumePostRequestBody();
resumePostRequestBody.setSource("Contoso.SodCheckProcess");
resumePostRequestBody.setType("microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated");
AccessPackageAssignmentRequestCallbackData data = new AccessPackageAssignmentRequestCallbackData();
data.setOdataType("microsoft.graph.accessPackageAssignmentRequestCallbackData");
data.setStage(AccessPackageCustomExtensionStage.AssignmentRequestCreated);
data.setCustomExtensionStageInstanceId("957d0c50-466b-4840-bb5b-c92cea7141ff");
data.setCustomExtensionStageInstanceDetail("This user is all verified");
resumePostRequestBody.setData(data);
graphClient.identityGovernance().entitlementManagement().accessPackageAssignmentRequests().byAccessPackageAssignmentRequestId("{accessPackageAssignmentRequest-id}").resume().post(resumePostRequestBody);
const options = {
authProvider,
};
const client = Client.init(options);
const resume = {
source: 'Contoso.SodCheckProcess',
type: 'microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated',
data: {
'@odata.type': 'microsoft.graph.accessPackageAssignmentRequestCallbackData',
stage: 'assignmentRequestCreated',
customExtensionStageInstanceId: '957d0c50-466b-4840-bb5b-c92cea7141ff',
customExtensionStageInstanceDetail: 'This user is all verified'
}
};
await client.api('/identityGovernance/entitlementManagement/accessPackageAssignmentRequests/0e60f18c-b2a0-4887-9da8-da2e30a39d99/resume')
.version('beta')
.post(resume);
<?php
use Microsoft\Graph\Beta\GraphServiceClient;
use Microsoft\Graph\Beta\Generated\IdentityGovernance\EntitlementManagement\AccessPackageAssignmentRequests\Item\Resume\ResumePostRequestBody;
use Microsoft\Graph\Beta\Generated\Models\AccessPackageAssignmentRequestCallbackData;
use Microsoft\Graph\Beta\Generated\Models\AccessPackageCustomExtensionStage;
$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);
$requestBody = new ResumePostRequestBody();
$requestBody->setSource('Contoso.SodCheckProcess');
$requestBody->setType('microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated');
$data = new AccessPackageAssignmentRequestCallbackData();
$data->setOdataType('microsoft.graph.accessPackageAssignmentRequestCallbackData');
$data->setStage(new AccessPackageCustomExtensionStage('assignmentRequestCreated'));
$data->setCustomExtensionStageInstanceId('957d0c50-466b-4840-bb5b-c92cea7141ff');
$data->setCustomExtensionStageInstanceDetail('This user is all verified');
$requestBody->setData($data);
$graphServiceClient->identityGovernance()->entitlementManagement()->accessPackageAssignmentRequests()->byAccessPackageAssignmentRequestId('accessPackageAssignmentRequest-id')->resume()->post($requestBody)->wait();
Import-Module Microsoft.Graph.Beta.Identity.Governance
$params = @{
source = "Contoso.SodCheckProcess"
type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated"
data = @{
"@odata.type" = "microsoft.graph.accessPackageAssignmentRequestCallbackData"
stage = "assignmentRequestCreated"
customExtensionStageInstanceId = "957d0c50-466b-4840-bb5b-c92cea7141ff"
customExtensionStageInstanceDetail = "This user is all verified"
}
}
Resume-MgBetaEntitlementManagementAccessPackageAssignmentRequest -AccessPackageAssignmentRequestId $accessPackageAssignmentRequestId -BodyParameter $params
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
from msgraph_beta.generated.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.resume_post_request_body import ResumePostRequestBody
from msgraph_beta.generated.models.access_package_assignment_request_callback_data import AccessPackageAssignmentRequestCallbackData
from msgraph_beta.generated.models.access_package_custom_extension_stage import AccessPackageCustomExtensionStage
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = ResumePostRequestBody(
source = "Contoso.SodCheckProcess",
type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
data = AccessPackageAssignmentRequestCallbackData(
odata_type = "microsoft.graph.accessPackageAssignmentRequestCallbackData",
stage = AccessPackageCustomExtensionStage.AssignmentRequestCreated,
custom_extension_stage_instance_id = "957d0c50-466b-4840-bb5b-c92cea7141ff",
custom_extension_stage_instance_detail = "This user is all verified",
),
)
await graph_client.identity_governance.entitlement_management.access_package_assignment_requests.by_access_package_assignment_request_id('accessPackageAssignmentRequest-id').resume.post(request_body)
Antwort
Das folgende Beispiel zeigt die Antwort.
HTTP/1.1 204 No Content
Beispiel 2: Fortsetzen und Ablehnen einer Zugriffspaketzuweisungsanforderung
Anforderung
Das folgende Beispiel zeigt eine Anforderung, die Verarbeitung einer Zugriffspaketzuweisungsanforderung durch Ablehnen der Anforderung, die auf einen Rückruf wartet, fortzusetzen. Eine Anforderung kann in der assignmentRequestCreated Phase des Popups nicht abgelehnt werden.
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageAssignmentRequests/9e60f18c-b2a0-4887-9da8-da2e30a39d99/resume
Content-Type: application/json
{
"source": "Contoso.SodCheckProcess",
"type": "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
"data": {
"@odata.type": "microsoft.graph.accessPackageAssignmentRequestCallbackData",
"stage": "AssignmentRequestCreated",
"customExtensionStageInstanceId": "857d0c50-466b-4840-bb5b-c92cea7141ff",
"state": "denied",
"customExtensionStageInstanceDetail": "Potential risk user based on the SOD check"
}
}
Antwort
Das folgende Beispiel zeigt die Antwort.
HTTP/1.1 204 No Content
Beispiel 3: Fortsetzen einer Zugriffspaketzuweisungsanforderung
Anforderung
Das folgende Beispiel zeigt eine Anforderung eines Aufrufs zum Fortsetzen einer Zugriffspaketzuweisungsanforderung, die auf einen Rückruf wartet.
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageAssignmentRequests/0e60f18c-b2a0-4887-9da8-da2e30a39d99/resume
Content-Type: application/json
{
"source": "Contoso.AADProcess",
"type": "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
"data": {
"@odata.type": "microsoft.graph.accessPackageRequestApprovalStageCallbackConfiguration",
"stage": "assignmentRequestCreated",
"customExtensionStageInstanceId": "7bf58d34-b3f9-4bae-8deb-abcd25cddea1",
"customExtensionStageInstanceDetail": "Completed."
}
}
// Code snippets are only available for the latest version. Current version is 5.x
// Dependencies
using Microsoft.Graph.Beta.IdentityGovernance.EntitlementManagement.AccessPackageAssignmentRequests.Item.Resume;
using Microsoft.Graph.Beta.Models;
var requestBody = new ResumePostRequestBody
{
Source = "Contoso.AADProcess",
Type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
Data = new AccessPackageRequestApprovalStageCallbackConfiguration
{
OdataType = "microsoft.graph.accessPackageRequestApprovalStageCallbackConfiguration",
AdditionalData = new Dictionary<string, object>
{
{
"stage" , "assignmentRequestCreated"
},
{
"customExtensionStageInstanceId" , "7bf58d34-b3f9-4bae-8deb-abcd25cddea1"
},
{
"customExtensionStageInstanceDetail" , "Completed."
},
},
},
};
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.IdentityGovernance.EntitlementManagement.AccessPackageAssignmentRequests["{accessPackageAssignmentRequest-id}"].Resume.PostAsync(requestBody);
// Code snippets are only available for the latest major version. Current major version is $v0.*
// Dependencies
import (
"context"
msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
graphidentitygovernance "github.com/microsoftgraph/msgraph-beta-sdk-go/identitygovernance"
graphmodels "github.com/microsoftgraph/msgraph-beta-sdk-go/models"
//other-imports
)
requestBody := graphidentitygovernance.NewResumePostRequestBody()
source := "Contoso.AADProcess"
requestBody.SetSource(&source)
type := "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated"
requestBody.SetType(&type)
data := graphmodels.NewAccessPackageRequestApprovalStageCallbackConfiguration()
additionalData := map[string]interface{}{
"stage" : "assignmentRequestCreated",
"customExtensionStageInstanceId" : "7bf58d34-b3f9-4bae-8deb-abcd25cddea1",
"customExtensionStageInstanceDetail" : "Completed.",
}
data.SetAdditionalData(additionalData)
requestBody.SetData(data)
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=go
graphClient.IdentityGovernance().EntitlementManagement().AccessPackageAssignmentRequests().ByAccessPackageAssignmentRequestId("accessPackageAssignmentRequest-id").Resume().Post(context.Background(), requestBody, nil)
// Code snippets are only available for the latest version. Current version is 6.x
GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);
com.microsoft.graph.beta.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.ResumePostRequestBody resumePostRequestBody = new com.microsoft.graph.beta.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.ResumePostRequestBody();
resumePostRequestBody.setSource("Contoso.AADProcess");
resumePostRequestBody.setType("microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated");
AccessPackageRequestApprovalStageCallbackConfiguration data = new AccessPackageRequestApprovalStageCallbackConfiguration();
data.setOdataType("microsoft.graph.accessPackageRequestApprovalStageCallbackConfiguration");
HashMap<String, Object> additionalData = new HashMap<String, Object>();
additionalData.put("stage", "assignmentRequestCreated");
additionalData.put("customExtensionStageInstanceId", "7bf58d34-b3f9-4bae-8deb-abcd25cddea1");
additionalData.put("customExtensionStageInstanceDetail", "Completed.");
data.setAdditionalData(additionalData);
resumePostRequestBody.setData(data);
graphClient.identityGovernance().entitlementManagement().accessPackageAssignmentRequests().byAccessPackageAssignmentRequestId("{accessPackageAssignmentRequest-id}").resume().post(resumePostRequestBody);
const options = {
authProvider,
};
const client = Client.init(options);
const resume = {
source: 'Contoso.AADProcess',
type: 'microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated',
data: {
'@odata.type': 'microsoft.graph.accessPackageRequestApprovalStageCallbackConfiguration',
stage: 'assignmentRequestCreated',
customExtensionStageInstanceId: '7bf58d34-b3f9-4bae-8deb-abcd25cddea1',
customExtensionStageInstanceDetail: 'Completed.'
}
};
await client.api('/identityGovernance/entitlementManagement/accessPackageAssignmentRequests/0e60f18c-b2a0-4887-9da8-da2e30a39d99/resume')
.version('beta')
.post(resume);
<?php
use Microsoft\Graph\Beta\GraphServiceClient;
use Microsoft\Graph\Beta\Generated\IdentityGovernance\EntitlementManagement\AccessPackageAssignmentRequests\Item\Resume\ResumePostRequestBody;
use Microsoft\Graph\Beta\Generated\Models\AccessPackageRequestApprovalStageCallbackConfiguration;
$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);
$requestBody = new ResumePostRequestBody();
$requestBody->setSource('Contoso.AADProcess');
$requestBody->setType('microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated');
$data = new AccessPackageRequestApprovalStageCallbackConfiguration();
$data->setOdataType('microsoft.graph.accessPackageRequestApprovalStageCallbackConfiguration');
$additionalData = [
'stage' => 'assignmentRequestCreated',
'customExtensionStageInstanceId' => '7bf58d34-b3f9-4bae-8deb-abcd25cddea1',
'customExtensionStageInstanceDetail' => 'Completed.',
];
$data->setAdditionalData($additionalData);
$requestBody->setData($data);
$graphServiceClient->identityGovernance()->entitlementManagement()->accessPackageAssignmentRequests()->byAccessPackageAssignmentRequestId('accessPackageAssignmentRequest-id')->resume()->post($requestBody)->wait();
Import-Module Microsoft.Graph.Beta.Identity.Governance
$params = @{
source = "Contoso.AADProcess"
type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated"
data = @{
"@odata.type" = "microsoft.graph.accessPackageRequestApprovalStageCallbackConfiguration"
stage = "assignmentRequestCreated"
customExtensionStageInstanceId = "7bf58d34-b3f9-4bae-8deb-abcd25cddea1"
customExtensionStageInstanceDetail = "Completed."
}
}
Resume-MgBetaEntitlementManagementAccessPackageAssignmentRequest -AccessPackageAssignmentRequestId $accessPackageAssignmentRequestId -BodyParameter $params
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
from msgraph_beta.generated.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.resume_post_request_body import ResumePostRequestBody
from msgraph_beta.generated.models.access_package_request_approval_stage_callback_configuration import AccessPackageRequestApprovalStageCallbackConfiguration
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = ResumePostRequestBody(
source = "Contoso.AADProcess",
type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
data = AccessPackageRequestApprovalStageCallbackConfiguration(
odata_type = "microsoft.graph.accessPackageRequestApprovalStageCallbackConfiguration",
additional_data = {
"stage" : "assignmentRequestCreated",
"custom_extension_stage_instance_id" : "7bf58d34-b3f9-4bae-8deb-abcd25cddea1",
"custom_extension_stage_instance_detail" : "Completed.",
}
),
)
await graph_client.identity_governance.entitlement_management.access_package_assignment_requests.by_access_package_assignment_request_id('accessPackageAssignmentRequest-id').resume.post(request_body)
Antwort
Das folgende Beispiel zeigt die Antwort.
HTTP/1.1 204 No Content
Beispiel 4: Fortsetzen einer Zugriffspaketzuweisungsanforderung von einer benutzerdefinierten Erweiterung
Anforderung
Das folgende Beispiel zeigt eine Anforderung eines Aufrufs zum Fortsetzen einer Zugriffspaketzuweisungsanforderung, die auf einen Rückruf von einer benutzerdefinierten Erweiterung wartet, um den Genehmigenden der Zugriffspaketzuweisung zu ermitteln.
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageAssignmentRequests/0e60f18c-b2a0-4887-9da8-da2e30a39d99/resume
Content-Type: application/json
{
"source": "Contoso.CustoEXT",
"type": "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
"data": {
"@odata.type": "microsoft.graph.microsoft.graph.assignmentRequestApprovalStageCallbackData",
"approvalStage": {
"durationBeforeAutomaticDenial": "P2D",
"escalationApprovers": [],
"fallbackEscalationApprovers": [],
"fallbackPrimaryApprovers": [],
"isApproverJustificationRequired": false,
"isEscalationEnabled": false,
"primaryApprovers": [
{
"@@odata.type": "#microsoft.graph.singleUser",
"description": "Primary approver of access package assignment.",
"id": "",
"isBackup": false
}
]
},
"customExtensionStageInstanceDetail": "A approval stage from Logic Apps",
"customExtensionStageInstanceId": "@{triggerBody()?['CustomExtensionStageInstanceId']}",
"stage": "assignmentRequestDeterminingApprovalRequirements"
},
"source": "LogicApps",
"type": "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated"
}
// Code snippets are only available for the latest version. Current version is 5.x
// Dependencies
using Microsoft.Graph.Beta.IdentityGovernance.EntitlementManagement.AccessPackageAssignmentRequests.Item.Resume;
using Microsoft.Graph.Beta.Models;
using Microsoft.Kiota.Abstractions.Serialization;
var requestBody = new ResumePostRequestBody
{
Source = "Contoso.CustoEXT",
Type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
Data = new CustomExtensionData
{
OdataType = "microsoft.graph.microsoft.graph.assignmentRequestApprovalStageCallbackData",
AdditionalData = new Dictionary<string, object>
{
{
"approvalStage" , new UntypedObject(new Dictionary<string, UntypedNode>
{
{
"durationBeforeAutomaticDenial", new UntypedString("P2D")
},
{
"escalationApprovers", new UntypedArray(new List<UntypedNode>
{
})
},
{
"fallbackEscalationApprovers", new UntypedArray(new List<UntypedNode>
{
})
},
{
"fallbackPrimaryApprovers", new UntypedArray(new List<UntypedNode>
{
})
},
{
"isApproverJustificationRequired", new UntypedBoolean(false)
},
{
"isEscalationEnabled", new UntypedBoolean(false)
},
{
"primaryApprovers", new UntypedArray(new List<UntypedNode>
{
new UntypedObject(new Dictionary<string, UntypedNode>
{
{
"@@odata.type", new UntypedString("#microsoft.graph.singleUser")
},
{
"description", new UntypedString("Primary approver of access package assignment.")
},
{
"id", new UntypedString("")
},
{
"isBackup", new UntypedBoolean(false)
},
}),
})
},
})
},
{
"customExtensionStageInstanceDetail" , "A approval stage from Logic Apps"
},
{
"customExtensionStageInstanceId" , "@{triggerBody()?['CustomExtensionStageInstanceId']}"
},
{
"stage" , "assignmentRequestDeterminingApprovalRequirements"
},
},
},
Source = "LogicApps",
Type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
};
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.IdentityGovernance.EntitlementManagement.AccessPackageAssignmentRequests["{accessPackageAssignmentRequest-id}"].Resume.PostAsync(requestBody);
// Code snippets are only available for the latest version. Current version is 6.x
GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);
com.microsoft.graph.beta.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.ResumePostRequestBody resumePostRequestBody = new com.microsoft.graph.beta.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.ResumePostRequestBody();
resumePostRequestBody.setSource("Contoso.CustoEXT");
resumePostRequestBody.setType("microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated");
CustomExtensionData data = new CustomExtensionData();
data.setOdataType("microsoft.graph.microsoft.graph.assignmentRequestApprovalStageCallbackData");
HashMap<String, Object> additionalData = new HashMap<String, Object>();
approvalStage = new ();
approvalStage.setDurationBeforeAutomaticDenial("P2D");
LinkedList<Object> escalationApprovers = new LinkedList<Object>();
approvalStage.setEscalationApprovers(escalationApprovers);
LinkedList<Object> fallbackEscalationApprovers = new LinkedList<Object>();
approvalStage.setFallbackEscalationApprovers(fallbackEscalationApprovers);
LinkedList<Object> fallbackPrimaryApprovers = new LinkedList<Object>();
approvalStage.setFallbackPrimaryApprovers(fallbackPrimaryApprovers);
approvalStage.setIsApproverJustificationRequired(false);
approvalStage.setIsEscalationEnabled(false);
LinkedList<Object> primaryApprovers = new LinkedList<Object>();
property = new ();
property.setOdataType("#microsoft.graph.singleUser");
property.setDescription("Primary approver of access package assignment.");
property.setId("");
property.setIsBackup(false);
primaryApprovers.add(property);
approvalStage.setPrimaryApprovers(primaryApprovers);
additionalData.put("approvalStage", approvalStage);
additionalData.put("customExtensionStageInstanceDetail", "A approval stage from Logic Apps");
additionalData.put("customExtensionStageInstanceId", "@{triggerBody()?['CustomExtensionStageInstanceId']}");
additionalData.put("stage", "assignmentRequestDeterminingApprovalRequirements");
data.setAdditionalData(additionalData);
resumePostRequestBody.setData(data);
resumePostRequestBody.setSource("LogicApps");
resumePostRequestBody.setType("microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated");
graphClient.identityGovernance().entitlementManagement().accessPackageAssignmentRequests().byAccessPackageAssignmentRequestId("{accessPackageAssignmentRequest-id}").resume().post(resumePostRequestBody);
const options = {
authProvider,
};
const client = Client.init(options);
const resume = {
source: 'Contoso.CustoEXT',
type: 'microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated',
data: {
'@odata.type': 'microsoft.graph.microsoft.graph.assignmentRequestApprovalStageCallbackData',
approvalStage: {
durationBeforeAutomaticDenial: 'P2D',
escalationApprovers: [],
fallbackEscalationApprovers: [],
fallbackPrimaryApprovers: [],
isApproverJustificationRequired: false,
isEscalationEnabled: false,
primaryApprovers: [
{
'@@odata.type': '#microsoft.graph.singleUser',
description: 'Primary approver of access package assignment.',
id: '',
isBackup: false
}
]
},
customExtensionStageInstanceDetail: 'A approval stage from Logic Apps',
customExtensionStageInstanceId: '@{triggerBody()?[\'CustomExtensionStageInstanceId\']}',
stage: 'assignmentRequestDeterminingApprovalRequirements'
},
source: 'LogicApps',
type: 'microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated'
};
await client.api('/identityGovernance/entitlementManagement/accessPackageAssignmentRequests/0e60f18c-b2a0-4887-9da8-da2e30a39d99/resume')
.version('beta')
.post(resume);
<?php
use Microsoft\Graph\Beta\GraphServiceClient;
use Microsoft\Graph\Beta\Generated\IdentityGovernance\EntitlementManagement\AccessPackageAssignmentRequests\Item\Resume\ResumePostRequestBody;
use Microsoft\Graph\Beta\Generated\Models\CustomExtensionData;
$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);
$requestBody = new ResumePostRequestBody();
$requestBody->setSource('Contoso.CustoEXT');
$requestBody->setType('microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated');
$data = new CustomExtensionData();
$data->setOdataType('microsoft.graph.microsoft.graph.assignmentRequestApprovalStageCallbackData');
$additionalData = [
'approvalStage' => [
'durationBeforeAutomaticDenial' => 'P2D',
'escalationApprovers' => [],
'fallbackEscalationApprovers' => [],
'fallbackPrimaryApprovers' => [],
'isApproverJustificationRequired' => false,
'isEscalationEnabled' => false,
'primaryApprovers' => [
[
'@@odata.type' => '#microsoft.graph.singleUser',
'description' => 'Primary approver of access package assignment.',
'id' => '',
'isBackup' => false,
],
],
],
'customExtensionStageInstanceDetail' => 'A approval stage from Logic Apps',
'customExtensionStageInstanceId' => '@{triggerBody()?[\'CustomExtensionStageInstanceId\']}',
'stage' => 'assignmentRequestDeterminingApprovalRequirements',
];
$data->setAdditionalData($additionalData);
$requestBody->setData($data);
$requestBody->setSource('LogicApps');
$requestBody->setType('microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated');
$graphServiceClient->identityGovernance()->entitlementManagement()->accessPackageAssignmentRequests()->byAccessPackageAssignmentRequestId('accessPackageAssignmentRequest-id')->resume()->post($requestBody)->wait();
Import-Module Microsoft.Graph.Beta.Identity.Governance
$params = @{
source = "Contoso.CustoEXT"
type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated"
data = @{
"@odata.type" = "microsoft.graph.microsoft.graph.assignmentRequestApprovalStageCallbackData"
approvalStage = @{
durationBeforeAutomaticDenial = "P2D"
escalationApprovers = @(
)
fallbackEscalationApprovers = @(
)
fallbackPrimaryApprovers = @(
)
isApproverJustificationRequired = $false
isEscalationEnabled = $false
primaryApprovers = @(
@{
"@@odata.type" = "#microsoft.graph.singleUser"
description = "Primary approver of access package assignment."
id = ""
isBackup = $false
}
)
}
customExtensionStageInstanceDetail = "A approval stage from Logic Apps"
customExtensionStageInstanceId = "@{triggerBody()?['CustomExtensionStageInstanceId']}"
stage = "assignmentRequestDeterminingApprovalRequirements"
}
source = "LogicApps"
type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated"
}
Resume-MgBetaEntitlementManagementAccessPackageAssignmentRequest -AccessPackageAssignmentRequestId $accessPackageAssignmentRequestId -BodyParameter $params
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
from msgraph_beta.generated.identitygovernance.entitlementmanagement.accesspackageassignmentrequests.item.resume.resume_post_request_body import ResumePostRequestBody
from msgraph_beta.generated.models.custom_extension_data import CustomExtensionData
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = ResumePostRequestBody(
source = "Contoso.CustoEXT",
type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
data = CustomExtensionData(
odata_type = "microsoft.graph.microsoft.graph.assignmentRequestApprovalStageCallbackData",
additional_data = {
"approval_stage" : {
"duration_before_automatic_denial" : "P2D",
"escalation_approvers" : [
],
"fallback_escalation_approvers" : [
],
"fallback_primary_approvers" : [
],
"is_approver_justification_required" : False,
"is_escalation_enabled" : False,
"primary_approvers" : [
{
"@@odata_type" : "#microsoft.graph.singleUser",
"description" : "Primary approver of access package assignment.",
"id" : "",
"is_backup" : False,
},
],
},
"custom_extension_stage_instance_detail" : "A approval stage from Logic Apps",
"custom_extension_stage_instance_id" : "@{triggerBody()?['CustomExtensionStageInstanceId']}",
"stage" : "assignmentRequestDeterminingApprovalRequirements",
}
),
source = "LogicApps",
type = "microsoft.graph.accessPackageCustomExtensionStage.assignmentRequestCreated",
)
await graph_client.identity_governance.entitlement_management.access_package_assignment_requests.by_access_package_assignment_request_id('accessPackageAssignmentRequest-id').resume.post(request_body)
Antwort
Das folgende Beispiel zeigt die Antwort.
HTTP/1.1 204 No Content