GetAdminConsentURL
Generates an admin consent URL for granting application permissions within a domain.
Input
Name | Type | Description |
CallbackUrl | String | The fully qualified URL to which Azure AD will redirect the user after completing the authorization process. Ensure this matches the configured Reply URL in the Azure AD application's settings to avoid errors. |
State | String | A unique, opaque value included in the authorization request to maintain state between the request and callback. Useful for mitigating cross-site request forgery (CSRF) attacks and ensuring continuity. |
Scope | String | A space-separated list of permissions that the application is requesting from the administrator. Ensure these align with the application's needs and consent framework.
The default value is https://graph.microsoft.com/group.readwrite.all https://graph.microsoft.com/user.read.all https://graph.microsoft.com/user.read https://graph.microsoft.com/directory.readwrite.all https://graph.microsoft.com/RoleManagement.ReadWrite.Directory https://graph.microsoft.com/directory.accessasuser.all https://graph.microsoft.com/domain.readwrite.all https://graph.microsoft.com/device.read.all https://graph.microsoft.com/RoleManagement.Read.Directory https://graph.microsoft.com/organization.Read.all https://graph.microsoft.com/Application.ReadWrite.all https://graph.microsoft.com/groupmember.readwrite.all https://graph.microsoft.com/AuditLog.Read.All https://graph.microsoft.com/DeviceLocalCredential.Read.All. |
Result Set Columns
Name | Type | Description |
URL | String | The fully-constructed authorization URL that administrators can use to grant your application permissions. This is the link your application should display or redirect the admin to. |