resourceAccess resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Object used to specify an OAuth 2.0 permission scope or an app role that an application requires, through the resourceAccess property of the requiredResourceAccess resource type.

Properties

Property Type Description
id Guid The unique identifier of an app role or delegated permission exposed by the resource application. For delegated permissions, this should match the id property of one of the delegated permissions in the oauth2PermissionScopes collection of the resource application's service principal. For app roles (application permissions), this should match the id property of an app role in the appRoles collection of the resource application's service principal.
type String Specifies whether the id property references a delegated permission or an app role (application permission). The possible values are: Scope (for delegated permissions) or Role (for app roles).

JSON representation

The following JSON representation shows the resource type.

{
  "id": "Guid",
  "type": "String"
}