az ad app update

[lestaat]

--required-resource-accesses is not well documented, how does it work?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 921aa920-c25f-5227-aabb-49116da38fa7
• Version Independent ID: 9b5a53ad-edf8-4d89-f8e6-cde01b7866f6
• Content: az ad app
• Content Source: src/command_modules/azure-cli-role/azure/cli/command_modules/role/_help.py
• Service: active-directory
• GitHub Login: @rloutlaw
• Microsoft Alias: routlaw

[yugangw-msft]

I will add help. For now you can check out sample usages in az ad app create -h and the update command has the same syntax

Examples
    Create a native application with delegated permission of "access the AAD directory as the
    signed-in user
        az ad app create --display-name my-native --native-app --requiredResourceAccess
        @manifest.json
        ("manifest.json" contains the following content)
        [{
            "resourceAppId": "00000002-0000-0000-c000-000000000000",
            "resourceAccess": [
                {
                    "id": "a42657d6-7f20-40e3-b6f0-cee03008a62a",
                    "type": "Scope"
                }
           ]
        }]

[krishnand]

Have a follow-up question on this since the documentation is still not quite clear. Could you clarify if a json file needs to be created/saved in the local file system and then referenced here or can the manifest.json string be inlined?

[tjprescott]

You can inline the string, but it will generally be a painful process because you'll need to escape all of the internal quotes. Using the @syntax is definitely the best way to go.

[Zazcallabah]

Is the @ syntax a cmd thing? Or is it specific to az? How can I do something similar in powershell?

[Zazcallabah]

When I try quoting the @manifest.json i get the following

$ad_app = az ad app create --display-name $name --homepage $home --identifier-uris $id --required-resource-accesses "@manifest.json" --oauth2-allow-implicit-flow true
string indices must be integers
Traceback (most recent call last):
  File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\knack\cli.py", line 197, in invoke
cmd_result = self.invocation.execute(args)
  File "C:\Users\troyd\AppData\Local\Temp\pip-install-8mvi0rnf\azure-cli-core\azure\cli\core\commands\__init__.py", line 366, in execute
  File "C:\Users\troyd\AppData\Local\Temp\pip-install-8mvi0rnf\azure-cli-role\azure\cli\command_modules\role\commands.py", line 31, in graph_err_handler
  File "C:\Users\troyd\AppData\Local\Temp\pip-install-8mvi0rnf\azure-cli-core\azure\cli\core\commands\__init__.py", line 343, in execute
  File "C:\Users\troyd\AppData\Local\Temp\pip-install-8mvi0rnf\azure-cli-core\azure\cli\core\commands\__init__.py", line 182, in __call__
  File "C:\Users\troyd\AppData\Local\Temp\pip-install-8mvi0rnf\azure-cli-core\azure\cli\core\__init__.py", line 436, in default_command_handler
  File "C:\Users\troyd\AppData\Local\Temp\pip-install-8mvi0rnf\azure-cli-role\azure\cli\command_modules\role\custom.py", line 637, in create_application
  File "C:\Users\troyd\AppData\Local\Temp\pip-install-8mvi0rnf\azure-cli-role\azure\cli\command_modules\role\custom.py", line 715, in _build_application_accesses
TypeError: string indices must be integers

Manifest.json content:

{"requiredResourceAccess":[{"resourceAppId":"00000002-0000-0000-c000-000000000000","resourceAccess":[{"id":"311a71cc-e848-46a1-bdf8-97ff7156d8e6","type":"Scope"}]}]}

Removing --required-resource-accesses "@manifest.json" makes the command go through without error.

Fun fact: no user named troyd exists on my computer, and the folder c:\users\troyd doesn't exist?

[cwoolum]

I was unable to get the file reference to work in OSX. I ended up using the permission add command in the CLI like

az ad app permission add --id $serverApplicationId --api 00000003-0000-0000-c000-000000000000 --api-permissions e1fe6dd8-ba31-4d61-89e7-88639da4683d=Scope

where api-permissions is a space separated list of key value pairs.