Utilize Azure Graph API for SharePoint Online User management -
let's have sharepoint online subscription, hence can manage own *.onmicrosoft.com domain , users/groups connected it.
as far understand, storage behind spo users , groups reside azure ad.
i had thought way manage these users/groups remotely using powershell module microsoft online. , wounder whether azure graph api can used purposes of retrieving users , group members spo? have no azure subscription, there way utilize azure graph api without azure subscription, having spo subscription?
ok, turns out possible. briefly steps following:
- create service principal serve 'contact point' external application (here start point); i've used symmetric key authorization;
- add newly created service principal 'company administrator' role;
- look @ azurecoder's article , check out comprehensive example of using graph api: https://github.com/azurecoder/azure-activedirectory; code correctly deals authentication parameters, constructing proper service realm.
after able grab users, groups , users membership information spo instance without creating azure ad subscription.
Comments
Post a Comment