As an Azure application owner, you have the essential responsibility of maintaining the delegated and application permissions of your application. Through Resource Admin, you can initiate updates to these permissions, tailoring them to meet evolving requirements and security standards. Once an update is requested, EmpowerID efficiently processes and implements these changes by updating the API permissions in Azure. This article will lead you through the process of adjusting your application's permissions, ensuring they align accurately with your application's operational and security needs.
Delete current API permissions
Navigate to the Resource Admin application portal for your environment.
Select Applications from the dropdown menu and search for the application with the API permissions you want to update.
Click the Friendly Name link for the application.
Select API Permissions on the application menu. You should see all current delegated and application permissions granted to the app.
Click Delete for the permission you want to remove from the application.
Confirm your decision.
Repeat for any other permissions you want to delete.
Update API permissions
Navigate to the Resource Admin application portal for your environment.
Select Applications from the dropdown menu and search for the application with the API permissions you want to update.
Click the Friendly Name link for the application.
Expand Actions and then click Update Azure Application API Permissions.
This initiates the Update Azure App API Permissions workflow with the selected application as the target.
Review the configured API permissions and toggle the button from Selected to Remove for each permission you want to remove from the application and then click Next to progress to the next step of the workflow.
If you do not want to remove any configured permissions simply click Next.
The workflow progresses to the Add Delegated API Permissions selector. Here you select Microsoft and/or custom application APIs from the tree to add delegated permissions to the application.
In the tree, search for and select the API with the delegated permissions you want to add to the application. For example, if you want to add permissions from the Microsoft Graph API, search for and select Microsoft Graph.
If you do not want to add any delegated permissions to the application, click Next and skip to Step 9 below.
Close the tree and then search for and select the specific related delegated permission you want to add to the application.
Repeat, adding any other permissions needed and when ready click Next to progress to the next step.
In the tree, search for and select the API with the application permissions you want to add to the application. If you do not want to add application permissions to the application, click Next and skip to step 12 below.
Close the tree and then search for and select the specific related application permission you want to add to the application.
Repeat, adding any other permissions needed and when ready click Next to progress to the next step.
Review the summary information of your proposed changes and when ready click Submit.
Verify changes in Azure
In Azure, navigate to Azure AD > App registrations.
Select All applications and search for the target application.
Click the Display Name link for the application.
Under Manage, click API Permissions. You should see the configured permissions reflect the changes made in EmpowerID.
...