You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: application-workloads/identity-governance/byod-logic-app/README.md
+18-15Lines changed: 18 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -201,23 +201,22 @@ After deploying the Logic App and assigning the required API permissions, you ne
201
201
202
202
3.**Link the Logic App** — When configuring the CDPR, select the **Resource Group** where you deployed the Logic App, then pick the Logic App by name from the dropdown. This binds the Logic App's HTTP trigger endpoint as the callback URL for the BYOD flow.
203
203
204
-
4.**Create an Access Package** — Still within the same catalog, create (or update) an **Access Package** and add the CDPR as a resource. Configure an **Access Review** policy on the package. When the Access Review runs, Entitlement Management will automatically call the Logic App with the appropriate trigger payload (`catalogId`, `resourceId`, and `data`) to start the BYOD data upload.
205
-
206
204
### Steps (Microsoft Graph API)
207
205
208
-
You can also attach the Logic App to a CDPR programmatically using the Microsoft Graph beta API. All requests below use the endpoint `https://graph.microsoft.com/beta` and require a bearer token with the `EntitlementManagement.ReadWrite.All` permission.
206
+
You can also attach the Logic App to a CDPR programmatically using the Microsoft Graph API. All requests below use the endpoint `https://graph.microsoft.com/v1.0` and require a bearer token with the `EntitlementManagement.ReadWrite.All` permission.
209
207
210
208
#### 1. Create a catalog (skip if you already have one)
211
209
212
210
```http
213
-
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageCatalogs
211
+
POST https://graph.microsoft.com/v1.0/identityGovernance/entitlementManagement/catalogs
214
212
Content-Type: application/json
215
213
Authorization: Bearer <token>
216
214
217
215
{
218
216
"displayName": "My BYOD Catalog",
219
217
"description": "Catalog for BYOD resources",
220
-
"isExternallyVisible": false
218
+
"state": "published",
219
+
"isExternallyVisible": true
221
220
}
222
221
```
223
222
@@ -228,13 +227,13 @@ Save the `id` from the response — this is your `catalogId`.
228
227
This creates the Custom Data Provided Resource and configures the Logic App as the notification endpoint in a single request:
229
228
230
229
```http
231
-
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageResourceRequests
230
+
POST https://graph.microsoft.com/v1.0/identityGovernance/entitlementManagement/resourceRequests
> **Note:** The `requestType` is `"AdminUpdate"` instead of `"AdminAdd"`. The `originId`, `displayName`, and `description` must match the existing CDPR.
296
+
> **Note:** The `requestType` is `"adminUpdate"` instead of `"adminAdd"`. The `originId`, `displayName`, and `description` must match the existing CDPR.
294
297
295
298
#### 3. Verify the CDPR was created
296
299
297
300
```http
298
-
GET https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageCatalogs/<catalogId>/accessPackageResources?$filter=originSystem eq 'CustomDataProvidedResource'
301
+
GET https://graph.microsoft.com/v1.0/identityGovernance/entitlementManagement/catalogs/<catalogId>/resources?$filter=originSystem eq 'CustomDataProvidedResource'
Copy file name to clipboardExpand all lines: application-workloads/identity-governance/byod-logic-app/metadata.json
+3-3Lines changed: 3 additions & 3 deletions
Original file line number
Diff line number
Diff line change
@@ -5,15 +5,15 @@
5
5
"description": "This template deploys a request-triggered Logic App for Microsoft Entra Entitlement Management with AADPOP authentication policies for secure webhook-based integration.",
6
6
"summary": "Deploy a request-triggered Logic App for Microsoft Entra Entitlement Management BYOD scenarios.",
0 commit comments