If your organization integrates applications with Azure AD, you can manage those applications in EmpowerID. This includes onboarding applications, assigning users to application roles, adding app roles and scopes to applications, editing and deleting applications, and more. In this article, we demonstrate how to add scopes to an Azure application that is managed by EmpowerID.
...
As an owner of an Azure application, you have the capability to enhance your application's functionality and access control by adding scopes within Resource Admin. This addition is a crucial step in defining and managing the permissions and access levels for your application's users and services. The following instructions will guide you through the process of adding scopes, allowing you to tailor your application's interaction with Azure services and resources more precisely.
Procedure
Navigate to the Resource Admin application portal for your environment.
Select Applications from the dropdown menu and search for the application to which you want to assign scope.
Click the Friendly Name link for the application.
...
Select Scopes on the application menu, expand Actions and then click Create Azure Application Scope.
This initiates the Create Azure App Scope workflow with the selected application as the target and directs you to the Azure Scope Details form.
Fill in the form fields with the appropriate information for your scope.
Insert excerpt IL:Azure Snippets IL:Azure Snippets name AppScopeFields nopanel true Click Next.
Review the summary information and then click Submit.
Verify the application role in Azure
In Azure, navigate to Azure AD > App registrations.
Select All applications and search for the target application.
Click the Display Name link for the application.
...
Under Manage, click Expose an API.
You should see the scope you created for the application.
...
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
...