Skip to content

Commit 3ed7955

Browse files
FaithOmbongiFaithOmbongi
authored
Merge pull request #25449 from msewaweru/authflowpolicy-entraroles
Add Entra roles for authentication flow policy
2 parents 67b699d + 7b416a7 commit 3ed7955

8 files changed

+51
-0
lines changed

‎api-reference/beta/api/authenticationflowspolicy-get.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2424
<!-- { "blockType": "permissions", "name": "authenticationflowspolicy_get" } -->
2525
[!INCLUDE [permissions-table](../includes/permissions/authenticationflowspolicy-get-permissions.md)]
2626

27+
[!INCLUDE [rbac-authentication-flow-policy-read](../includes/rbac-for-apis/rbac-authentication-flow-policy-read.md)]
28+
2729
## HTTP request
2830

2931
<!-- {

‎api-reference/beta/api/authenticationflowspolicy-update.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2424
<!-- { "blockType": "permissions", "name": "authenticationflowspolicy_update" } -->
2525
[!INCLUDE [permissions-table](../includes/permissions/authenticationflowspolicy-update-permissions.md)]
2626

27+
[!INCLUDE [rbac-authentication-flow-policy-update](../includes/rbac-for-apis/rbac-authentication-flow-policy-update.md)]
28+
2729
## HTTP request
2830

2931
<!-- {

‎api-reference/beta/includes/rbac-for-apis/rbac-authentication-flow-policy-read.md

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
author: msewaweru
3+
ms.topic: include
4+
---
5+
6+
> [!IMPORTANT]
7+
> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
8+
> - External ID User Flow Administrator
9+
> - External Identity Provider Administrator
10+
> - Application Administrator
11+
> - Security Administrator
12+
> - Security Reader
13+
> - Global Reader
14+

‎api-reference/beta/includes/rbac-for-apis/rbac-authentication-flow-policy-update.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
author: msewaweru
3+
ms.topic: include
4+
---
5+
6+
> [!IMPORTANT]
7+
> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
8+
> - External ID User Flow Administrator

‎api-reference/v1.0/api/authenticationflowspolicy-get.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2323
<!-- { "blockType": "permissions", "name": "authenticationflowspolicy_get" } -->
2424
[!INCLUDE [permissions-table](../includes/permissions/authenticationflowspolicy-get-permissions.md)]
2525

26+
[!INCLUDE [rbac-authentication-flow-policy-read](../includes/rbac-for-apis/rbac-authentication-flow-policy-read.md)]
27+
2628
## HTTP request
2729

2830
<!-- {

‎api-reference/v1.0/api/authenticationflowspolicy-update.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2323
<!-- { "blockType": "permissions", "name": "authenticationflowspolicy_update" } -->
2424
[!INCLUDE [permissions-table](../includes/permissions/authenticationflowspolicy-update-permissions.md)]
2525

26+
[!INCLUDE [rbac-authentication-flow-policy-update](../includes/rbac-for-apis/rbac-authentication-flow-policy-update.md)]
27+
2628
## HTTP request
2729

2830
<!-- {

‎api-reference/v1.0/includes/rbac-for-apis/rbac-authentication-flow-policy-read.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
author: msewaweru
3+
ms.topic: include
4+
---
5+
6+
> [!IMPORTANT]
7+
> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
8+
> - External ID User Flow Administrator
9+
> - External Identity Provider Administrator
10+
> - Application Administrator
11+
> - Security Administrator
12+
> - Security Reader
13+
> - Global Reader

‎api-reference/v1.0/includes/rbac-for-apis/rbac-authentication-flow-policy-update.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
author: msewaweru
3+
ms.topic: include
4+
---
5+
6+
> [!IMPORTANT]
7+
> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation.
8+
> - External ID User Flow Administrator

0 commit comments

Comments
 (0)