Microsoft Identity | Automating Azure AD with MS Graph

Azure AD is a complex service but luckily many of the operations can be automated. In part three of the #MicrosoftIdentity series, we look at how we can use code with MS Graph to automate (devopsify) common tasks for our solutions and how to elevate privileges securely. MSIdentity Series playlist: aka.ms/DevOpsLab/MSIdentitySe...
Jump to:
00:00 Welcome to the DevOps Lab
00:25 Automating Azure AD with MS Graph and .NET Notebooks with Christos
01:23 Why automate
02:18 Demo Microsoft Graph
04:48 Demo API with SPA
Learn more:
Managed Identities aka.ms/DevOpsLab/ManagedID
Implement Managed ID aka.ms/DevOpsLab/ImplementMan...
Learn more with the Microsoft 425Show 425show.com/
Azure DevOps Docs aka.ms/AzureDevOpsDocumentation
DevOps Blogs aka.ms/devopsblog
Connect:
April / theapriledwards
Christos / christosmatskas
Check out new episodes every week at aka.ms/DevOpsIsForEveryone!

[@user-ld4qw7xj3s]

Very nice 👍

[@kevball21]

What about automating Admin Consent for your app registration? Are there best practices around this or would this not be something that should be automated?

[@ChristosMatskas]

Hi Kevin, we recommend against automating Admin Consent since it's a very privileged operation. You can use a special URL to ask admins to consent outside of the Azure AD Portal but, in general, consent at this level should be very carefully vetted

[@kevball21]

@@ChristosMatskas Thanks for the reply, that is what I was hoping you would say! It does cause some scenarios to not be able to be fully automated (In my case Azure B2C Identity applications for AAD Auth) but it makes sense not to give pipeline service principal that much power.

[@chrisludlam]

Cannot find the github download?