Martin Kolb

← Microsoft Graph Customer Feedback

My feedback

  1. Restrict permissions to app-only Azure AD applications consuming Office 365 services on resource level

    367 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Forgot password?
    Create a password
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    49 comments  ·  Microsoft Graph Feature Requests » Identity and Access  ·  Flag idea as inappropriate…  ·  Admin →
    started  ·  Adminjackson.woods (Program Manager, Microsoft Graph) responded

    Work has started. We plan to build an experience where end users and administrators can pick a specific resource to grant consent to, such as a specific group or site. This will be programmable through Microsoft Graph API.

    An error occurred while saving the comment
    Martin Kolb commented  · 

    Especially for germany this has a huge impact, since I am not able to get a consent for an app permission that can read all private calendar events of everyone in the organization. The work councils of our customers will never allow such a piece of code.
    The administrator needs to have the granular option to restrict permissions on a calendar similar to delegated permissions on a shared calendar (free busy / title only / … ).
    Currently, we are running with a service account, but this has bad side effects: It consumes an exchange online license, and currently it's not possible to create Graph subscriptions for shared calendars within the user context.

    Thanks in advance!

    Martin Kolb supported this idea  · 

Feedback and Knowledge Base

(thinking…)