Forum Discussion
Unsupported but very useful way to use the hidden Azure API
- Sep 13, 2018
Fantastic information!!! Thank you for sharing!!
I have discovered COUNTLESS uses for this, from obtaining all of the 'Conditional Access' policies that are configured in AzureAD, to obtaining a list of Azure Gallery/Marketplace Apps that are available as 'Enterprise Apps'.
Thanks again!
Evan
JosLieben The hidden API link throws unauthorized error. Is it suppose to?
Open a Browser like Firefox or Chrome, open the Developer Tools (F12), do the change you want to do by the API in the GUI on portal.azure.com, and check what's going on on the Network-Tab of the Developer Tools, because the GUI is calling the same API.
And there you'll see the call to the API with all the headers required
Just lookout for the call to https://main.iam.ad.ext.azure.com
PS. Don't forget to provide the Bearer Token and the x-ms-client-request-id