CODEWITHSUNDEEP
azureazure-active-directory
S. Deshmukh
S. Deshmukh

Reputation: 324

Azure Ad Application Permission

In azure ad application, We are giving permission to application and run our app. It give proper data, after doing this we remove all permission, then also we does not get unauthorized error. What is issue with Azure Ad permission? Is there cache issue, which we have to clear?

Upvotes: 1

Views: 293

Answers (2)

Pete Philters
Pete Philters

Reputation: 889

To revoke a permission isn’t currently available through the Portal. When you apply a permission a link is created between the application and service principal.

There are two types of permission grants between Applications and Service Principals.

Application grants are represented by AppRoleAssignments. These can be seen by using the graph api to get them for a particular Service Principal. Once you know the principal id for the permission you want to delete you can remove it using by sending a delete request to the delete endpoint. .

Delegated permission are represented by OAuth2PermissionGrants. Similar to AppRoleAsssignments there is a get method and a delete method.

Let me know if I need to make anything clearer or can help.

Upvotes: 0

Martin Brandl
Martin Brandl

Reputation: 58931

I don't know how you revoked the permission for your application but I assume you used the Azure Portal. The most likely reason is that you forgot to hit the Grant permissions button:

enter image description here

Upvotes: 2

Related Questions