Skip to content

Commit f00f9db

Browse files
authored
Document update for permission grant modification
Added instructions for updating permission grants in MS Graph.
1 parent d240d33 commit f00f9db

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed

concepts/permissions-grant-via-msgraph.md

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -641,6 +641,25 @@ Content-type: application/json
641641
}
642642
```
643643

644+
### Update the permission grant
645+
646+
To add more permissions or remove some permissions for the client to the resource service principal for the user, update the **oauth2PermissionGrant** object as shown in the following request. The request returns a `204 No Content` response.
647+
648+
<!-- {
649+
"blockType": "request",
650+
"name": "update-delegated-perms-sp-oauth2permissiongrants"
651+
}-->
652+
```msgraph-interactive
653+
PATCH https://graph.microsoft.com/v1.0/oauth2PermissionGrants/47nZsM8O_UuNq5Jz3QValETpqX7OcT1EgRxx6AR7VXqdkr0_VoxiRIUeDrmns6Kl
654+
Content-type: application/json
655+
656+
{
657+
"scope": "openid profile offline_access DelegatedPermissionGrant.ReadWrite.All AccessReview.ReadWrite.All AgentIdentityBlueprint.ReadWrite.All"
658+
}
659+
```
660+
661+
---
662+
644663
## Step 3: Revoke delegated permissions granted to a service principal on behalf of a user [optional]
645664

646665
If a service principal has been granted multiple delegated permission grants on behalf of a user, you can choose to revoke either specific grants or all grants. Use this method to remove and revoke consent for the delegated permissions that you assigned to the client service principal.

0 commit comments

Comments
 (0)