Event banner
Event details
Dear Team, with transition from AzureAD to EntraID, Microsoft is also promoting to migrate to MS Graph API for the automations.
The permissions that are granted via Graph API are tenant wide and cannot be restricted to limited objects on EntraID.
My question is that how can we limit Graph API permissions to specific objects so that the possible attack surface decreases in case of security incident?
Thank you.
tdetznerMicrosoft
Great to hear that you are moving to Entra ID. Here are few resources, that should help: https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview https://github.com/kylemar/Microsoft-identity-platform-training#microsoft-identity-platform-training