Skip to content

Commit 6e86dcc

Browse files
LauragraLauragra
authored
Merge pull request #25602 from microsoftgraph/rbac-certBasedAuthConfig
Entra admin roles - cert-based auth configuration
2 parents 1d5eccc + e328bcb commit 6e86dcc

10 files changed

+29
-3
lines changed

‎api-reference/beta/api/certificatebasedauthconfiguration-delete.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2424
<!-- { "blockType": "permissions", "name": "certificatebasedauthconfiguration_delete" } -->
2525
[!INCLUDE [permissions-table](../includes/permissions/certificatebasedauthconfiguration-delete-permissions.md)]
2626

27+
[!INCLUDE [rbac-cert-based-auth-config-apis](../includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md)]
28+
2729
## HTTP request
2830

2931
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/api/certificatebasedauthconfiguration-get.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2424
<!-- { "blockType": "permissions", "name": "certificatebasedauthconfiguration_get" } -->
2525
[!INCLUDE [permissions-table](../includes/permissions/certificatebasedauthconfiguration-get-permissions.md)]
2626

27+
[!INCLUDE [rbac-cert-based-auth-config-apis](../includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md)]
28+
2729
## HTTP request
2830

2931
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/api/certificatebasedauthconfiguration-list.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2727
<!-- { "blockType": "permissions", "name": "certificatebasedauthconfiguration_list" } -->
2828
[!INCLUDE [permissions-table](../includes/permissions/certificatebasedauthconfiguration-list-permissions.md)]
2929

30+
[!INCLUDE [rbac-cert-based-auth-config-apis](../includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md)]
31+
3032
## HTTP request
3133

3234
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/api/certificatebasedauthconfiguration-post-certificatebasedauthconfiguration.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ Namespace: microsoft.graph
1616
Create a new [certificateBasedAuthConfiguration](../resources/certificateBasedAuthConfiguration.md) object.
1717

1818
> [!NOTE]
19-
> Only a single instance of a **certificateBasedAuthConfiguration** can be created (the collection can only have one member). It always has a fixed ID with a value of '29728ade-6ae4-4ee9-9103-412912537da5'.
19+
> Only a single instance of a **certificateBasedAuthConfiguration** can be created (the collection can only have one member). It always has a fixed ID with a value of `29728ade-6ae4-4ee9-9103-412912537da5`.
2020
2121
[!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
2222

@@ -27,7 +27,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
2727
<!-- { "blockType": "permissions", "name": "certificatebasedauthconfiguration_post_certificatebasedauthconfiguration" } -->
2828
[!INCLUDE [permissions-table](../includes/permissions/certificatebasedauthconfiguration-post-certificatebasedauthconfiguration-permissions.md)]
2929

30-
For delegated scenarios, the calling user must have the *Global Administrator* [Microsoft Entra role](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles).
30+
[!INCLUDE [rbac-cert-based-auth-config-apis](../includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md)]
3131

3232
## HTTP request
3333

‎api-reference/beta/includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
author: vimrang
3+
ms.topic: include
4+
---
5+
6+
> [!IMPORTANT]
7+
> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Global Administrator* is the only role supported for this operation.

‎api-reference/v1.0/api/certificatebasedauthconfiguration-delete.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2222
<!-- { "blockType": "permissions", "name": "certificatebasedauthconfiguration_delete" } -->
2323
[!INCLUDE [permissions-table](../includes/permissions/certificatebasedauthconfiguration-delete-permissions.md)]
2424

25+
[!INCLUDE [rbac-cert-based-auth-config-apis](../includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md)]
26+
2527
## HTTP request
2628

2729
<!-- { "blockType": "ignored" } -->

‎api-reference/v1.0/api/certificatebasedauthconfiguration-get.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2222
<!-- { "blockType": "permissions", "name": "certificatebasedauthconfiguration_get" } -->
2323
[!INCLUDE [permissions-table](../includes/permissions/certificatebasedauthconfiguration-get-permissions.md)]
2424

25+
[!INCLUDE [rbac-cert-based-auth-config-apis](../includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md)]
26+
2527
## HTTP request
2628

2729
<!-- { "blockType": "ignored" } -->

‎api-reference/v1.0/api/certificatebasedauthconfiguration-list.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2525
<!-- { "blockType": "permissions", "name": "certificatebasedauthconfiguration_list" } -->
2626
[!INCLUDE [permissions-table](../includes/permissions/certificatebasedauthconfiguration-list-permissions.md)]
2727

28+
[!INCLUDE [rbac-cert-based-auth-config-apis](../includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md)]
29+
2830
## HTTP request
2931

3032
<!-- { "blockType": "ignored" } -->

‎api-reference/v1.0/api/certificatebasedauthconfiguration-post-certificatebasedauthconfiguration.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
2525
<!-- { "blockType": "permissions", "name": "certificatebasedauthconfiguration_post_certificatebasedauthconfiguration" } -->
2626
[!INCLUDE [permissions-table](../includes/permissions/certificatebasedauthconfiguration-post-certificatebasedauthconfiguration-permissions.md)]
2727

28-
For delegated scenarios, the calling user must have the *Global Administrator* [Microsoft Entra role](/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles).
28+
[!INCLUDE [rbac-cert-based-auth-config-apis](../includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md)]
2929

3030
## HTTP request
3131

‎api-reference/v1.0/includes/rbac-for-apis/rbac-cert-based-auth-config-apis.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
author: vimrang
3+
ms.topic: include
4+
---
5+
6+
> [!IMPORTANT]
7+
> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Global Administrator* is the only role supported for this operation.

0 commit comments

Comments
 (0)