Add-AzureADMSServicePrincipalDelegatedPermissionClassification

Module:

AzureAD

Add a classification for a delegated permission.

Syntax

Add-AzureADMSServicePrincipalDelegatedPermissionClassification
   -ServicePrincipalId <String>
   -Classification <ClassificationEnum>
   -PermissionId <String>
   -PermissionName <String>
   [<CommonParameters>]

Description

The Add-AzureADMSServicePrincipalDelegatedPermissionClassification cmdlet creates a delegated permission classification for the given permission on service principal.

Examples

Example 1: Create Delegated Permission Classification

PS C:\> Add-AzureADMSServicePrincipalDelegatedPermissionClassification -ServicePrincipalId "aaaaaaaa-bbbb-cccc-1111-222222222222" -PermissionId "b340eb25-3456-403f-be2f-af7a0d370277" -Classification Low -PermissionName "User.ReadBasic.All"

Classification : Low
Id             : 5XBeIKarUkypdm0tRsSAQwE
PermissionId   : b340eb25-3456-403f-be2f-af7a0d370277
PermissionName : User.ReadBasic.All

This command creates a delegated permission classification for the given permission on the service principal.

Parameters

-Classification

The classification for a delegated permission. This parameter can take one of the following values:

• "Low" - Specifies a classification for a permission as low impact.
• "Medium" - Specifies a classification for a permission as medium impact.
• "High" - Specifies a classification for a permission as high impact.

Type:	ClassificationEnum
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-PermissionId

The id for a delegated permission.

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-PermissionName

The name for a delegated permission.

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-ServicePrincipalId

The unique identifier of a service principal object in Azure Active Directory.

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

Outputs

Microsoft.Online.Administration.DelegatedPermissionClassification

Notes

See the migration guide for Add-AzureADMSServicePrincipalDelegatedPermissionClassification to the Microsoft Graph PowerShell.