Login/App Permissions

[PJMarcum]

1. The app shouldn't need Read/Write to simply document. Getting approval for Read/Write is much harder that getting approval for simply reading.
2. When using an existing app registration and secret key login shouldn't be required.

[Micke-K]

Hello!

The app doesn't require write. If you use it to request consent, they it will add readwrite. You can set up your own app with just read permissions. Menu items will then be orange because of limited access. The readwrite default consent permissions is because that is the main functionality of the app eg export/import but again that doesn't stop you from using custom permissions. I use two apps, one for read and one for write.

Regarding app login, I'll see if I can have a look at this for next version. There is another request for this. You can do it in the batch job but not in the UI. I have to re-write some UI/Authentication parts to support it.

Cheers!

[Micke-K]

Hello!

What do you get when connecting to an app with read only access?

The app should warn you about it and menu items should be orange but that's it. This should be the default behaviour.

There is a setting where the app will display a consent prompt if you don't have all permissions for full functionality. This happens if you turn off Use Default Permissions.

I'll see if I can test it this week.

Cheers!

[Micke-K]

Hello

I created an Azure App with read only delegated permissions and logged on with my user and it is working. All items in the menu that has read permissions are Orange and those without permissions are Red. I could also generate a documentation based on the policies. I will look into supporting authenticating with the app as well.

[PJMarcum]

Awesome, thank you. So, for you it's not prompting about the missing permissions? I'm not able to get this to work. I'm sure it's something I am not doing properly though. 😉 BI For Intune Register for a Free Trial PowerStacks.com<https://powerstacks.com/>

…

________________________________ From: Mikael Karlsson ***@***.***> Sent: Tuesday, May 30, 2023 8:31 AM To: Micke-K/IntuneManagement ***@***.***> Cc: John Marcum ***@***.***>; Author ***@***.***> Subject: Re: [Micke-K/IntuneManagement] Login/App Permissions (Issue #134) Hello I created an Azure App with read only delegated permissions and logged on with my user and it is working. All items in the menu that has read permissions are Orange and those without permissions are Red. I could also generate a documentation based on the policies. I will look into supporting authenticating with the app as well. [image]<https://user-images.githubusercontent.com/43226266/241982286-f5d55edd-5f9f-480b-bfec-89bc473cbf7c.png> — Reply to this email directly, view it on GitHub<#134 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AJPWGNOW7VJZUKDZ3DZRV4LXIXZB5ANCNFSM6AAAAAAXXFQPGA>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[Micke-K]

Hello!

Check in your Settings. Do you have "Use Default Permissions" unchecked?

If this is not checked, it will prompt for missing permissions. If it is checked, it will just use the permissions assigned to the app.

Cheers!

[Micke-K]

Checking in to see if we can close this issue.

Cheers!