CODEWITHSUNDEEP
azureasp.net-coreazure-active-directoryazure-ad-msal
JuChom
JuChom

Reputation: 5999

Why my app is asking for permissions not configured in Azure AD App

I have a very basic project authenticating user on my Office 365 directory.

When I access it, I have this consent screen: enter image description here

I'm a bit surprised because, I've removed all the permissions to my application: enter image description here

The request URL has this permissions:

&scope=openid%20profile%20offline_access%20User.Read.All%20Calendars.ReadWrite.Shared

Why does the application ask for this permissions even if they are not set in AzureAD?

Upvotes: 1

Views: 109

Answers (1)

Tony Ju
Tony Ju

Reputation: 15639

There is a difference between v1.0 endpoint and v2.0 endpoint. When use v1.0 endpoint, we will use resource instead of scope. All the permissions should be listed under API permissions.

However, when use v2.0 endpoint, we can ask for permissions dynamically. It doesn't matter if you have permissions under API permissions. When you add the permissions to scope, you will see the consent window.

Upvotes: 2

Related Questions