Prerequisites for Azure Active Directory
Permissions required in Azure Active Directory (AD): The service principal provided for the Kyvos application will need the following permissions to access the Azure AD.
API / Permissions name | Type | Description | Admin consent required |
Directory.Read.All | Application | Read directory data | Yes |
User.Read | Delegated | Sign in and read user profile | No |
To grant this permission to the client ID, the following steps can be followed:
On the Azure portal, navigate to Home > App Registration and select the App for Kyvos.
Under API permissions, click Add a permission, and then click Microsoft Graph.
On the Request API permissions dialog box, select the Application Permissions option.
On the Select Permissions area, search for directory and select the Directory.Read.all option from the results.
Click Add Permissions. The permission is required for Kyvos to read from the Azure AD.
Directory.Read.All: To read directory data
User.Read: To sign in and read user profile