Skip to content

Add resourceAppId property to oAuth2PermissionGrant #861

Open

Description

@ouali-ls2

To check what permissions are granted by our clients, we use application mode and get the servicePrincipal, this works fine for the permissions of type applications. The problem lies in the delegated permissions. Currently, oAuth2PermissionGrant exposes only resourceId (servicePrincipalId which is different from tenant to tenant) and no resourceAppId. So we need to get this servicePrincipal by this resourceId to get the appId. The problem here is that we are not allowed to do this unless we have an Application.Read.All which we cannot ask or justify to our clients because it is an elevated permission.

Activity

  1. amarmechai commented on Aug 3, 2025

    @amarmechai

    We also need resourceAppId exposed in oAuth2PermissionGrant for delegated permissions to avoid requiring elevated Application.Read.All access. This would help us identify target apps reliably across tenants.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions