我正在尝试获取resourceProvisioningOptions = Team所在的所有组的列表,下面是通过API调用获取所有数据的url:
$clientID = xxxx
$tenantName = xxxx
$ClientSecret = xxxx
$resource = "https://graph.microsoft.com/"
$ReqTokenBody = @{
Grant_Type = "client_credentials"
Scope = "https://graph.microsoft.com/.default"
client_Id = $clientID
Client_Secret = $clientSecret
}
$authheader = @{
'Authorization' = "Bearer $($Tokenresponse.access_token)"
'Content-Type'='application\json'
}
$TokenResponse = Invoke-RestMethod -Uri "https://login.microsoftonline.com/$TenantName/oauth2/v2.0/token" -Method POST -Body $ReqTokenBody
$test = "'Team'"
$apiUrl = 'https://graph.microsoft.com/beta/groups?$filter=resourceProvisioningOptions/Any(x:x eq {0})' -f $test
$Data = Invoke-RestMethod -Uri $apiUrl -Headers $authheader -Body $ReqTokenBody -Method Get
$Groups = ($Data | select-object Value).Value | Select-Object displayName, id, description, mail | Out-File .\texxtfile.txt
但是,当我尝试运行该脚本时,即使我拥有进行API调用所需的所有权限,也会收到401错误。
发布于 2019-10-12 06:33:39
您可能已在AAD应用程序中选择了应用程序权限。有一个附加步骤。您需要在应用程序注册门户中获得您的应用程序的管理员同意,才能使用Group.Read.All运行此程序。如果您没有在UI中执行此操作,则此操作将失败。
https://stackoverflow.com/questions/58344301
复制相似问题