blog.atwork.at

news and know-how about microsoft, technology, cloud and more.

Use Azure AD app principal without user context

Monday, August 21, 2017 1:41 PM js
For an application registered in AAD to be able to run in application context only without a user context the "Company Administrator" role has to be assigned to the application in order to be able to access administrator endpoints for APIs like the Microsoft Graph. No additional permissions have to be assigned to the application after assigning this role.The assignment has to be done using PowerShell and looks like this: (the app registration has to be done beforehand)Install-Module AzureADConnect-AzureAD$app = Get-AzureADServicePrincipal -SearchString "your app name"$role = Get-AzureADDirectoryRole | Where-Object { $_.DisplayName -eq "Company Administrator" }Add-AzureADDirectoryRoleMember -ObjectId $role.ObjectId -RefObjectId $app.ObjectIdNote that you have to replace the string "your app name" with the name provided to your app registration. The script intalls (if not already installed) the AzureAD PowerShell module and uses the contained commandlets to get the service principal of the app registration by name, gets the Azure AD Directory Role "Company Administrator" and adds this role to the service principal of the app. After the role has been added, the app might, e.g., make queries to the user endpoint of the Microsoft Graph API to get properties from any users in the AAD.
Azure | Microsoft | Office365 | PowerShell | Security
mehr

How user profile synchronization works in Office 365 services

Friday, July 7, 2017 3:00 PM Martina Grom
Office 365 users often ask about user profiles in various Office 365 services and where to change what. Since the Office 365 products do have a history, there are different places where user profile data is stored and how specific properties are synchronized. So, we at atwork thought that it makes sense to inform about the current user profile status in Office 365 with this article.
Azure | Cloud | English | Microsoft | Office365 | Office | SharePoint | Exchange | Skype | Yammer
mehr

Add your local IP address to a SQL Azure Firewall easily

Saturday, May 6, 2017 6:00 AM Toni Pohl
When working with SQL Azure you are aware that a connection is just established, if the client’s IP address is configured in the firewall of the SQL Azure database server. You needed to open the Azure Portal-SQL servers service, and add your IP address manually. Well, the good story is, now the SQL Server 2016 Management Studio does this for you!
Azure | Cloud | English | Developer | Microsoft | SQL Server | Security
mehr

Tips for PowerApps-issues and status

Sunday, April 16, 2017 6:45 AM Toni Pohl
Recently I got an error in my PowerApp when trying to get an Office 365 User Profile, although this was working before: The service returned an error: Office365Users!MyProfile: {"status":402,"message":Insufficient privileges to complete the operation.","source":"127.0.0.1"}”. See here how to deal with such scenarios!
General | App | Azure | Cloud | Developer | English | Microsoft | Office365 | PowerApps
mehr

atwork bei den Microsoft Osterhelden 2017

Tuesday, April 11, 2017 10:00 AM Toni Pohl
Mit dem Motto Wir digitalisieren Österreich #DigitaleHelden” startet Microsoft eine Digitalisierungs-Kampagne mit Gewinnspiel. Wir von atwork freuen uns, mit dabei zu sein und informieren über die neuesten Microsoft Cloud Technologien und zeigen eine PowerApp für den täglichen Gebrauch im Unternehmen. Schauen Sie rein und machen Sie mit!
General | Azure | Cloud | Microsoft | Office365 | atwork
mehr