Changes for page Unternehmensanwendung registrieren in der Microsoft Entra ID

Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -13,12 +13,20 @@
13	13
14	14	== Register an Enterprise Application ==
15	15
16		-First, log in to your [[Microsoft Entra ID>>url:https://aad.portal.azure.com/]]. Click the Identity > Manage tab > //Enterprise Applications// and create a new application registration.
	16	+First, log in to your [[Microsoft Entra ID>>url:https://aad.portal.azure.com/]]. Click the //Identity //> //Manage //tab > //Enterprise Applications// and create a new application registration.
17	17
18	18	[[App registrations in Microsoft Entra ID>>image:68_Unternehmensanwendung registrieren_App Registrierung Oberfläche_1919.png]]
19	19
20		-Enter all the necessary information there: Assign an app name and select the accounts to be supported. Complete the process by clicking //Register//.
	20	+Enter all the necessary information there: Assign an app name and select the accounts to be supported.
21	21
	22	+{{box}}
	23	+**Note for [[setting up OAuth2 on the ACMP Server>>doc:ACMP.68.ACMP-Solutions.System.Einstellungen.ACMP Server.OAuth2 am ACMP Server einrichten.WebHome]]:**
	24	+If only one account from the organisation directory is allowed to access it, you must select the first option. Under the redirect URI, you must enter the following: https://login.microsoftonline.com/common/oauth2/nativeclient
	25	+Register the application as //Public client/native (mobile & desktop)//.
	26	+{{/box}}
	27	+
	28	+Complete the process by clicking //Register//.
	29	+
22	22	[[Register an application>>image:68_Unternehmensanwendung registrieren_App Registrierung neue anlegen_1919.png]]
23	23
24	24	When you open the application you have created, you will see a summary of the information you have added. This includes the display name, details of the supported account types and the various IDs (application, object and directory ID). You will need the latter details (the IDs) if, for example, you want to create a new portal for Microsoft 365.
...	...	@@ -29,14 +29,38 @@
29	29
30	30	Next, grant the company application the necessary permissions so that it can access the interface. To do this, switch to the Permissions area within the registered app (//Manage// > //API permissions//).
31	31
32		-[[Add permissions>>image:68_Unternehmensanwendung registrieren_Berechtigungen hinzufügen_1919.png]]
	40	+[[Add permission>>image:68_Unternehmensanwendung registrieren_Berechtigungen hinzufügen_1919.png]]
33	33
34		-Add permissions Click on //Add permission. //A page will open where you can request API permissions. In this step, you must select //Microsoft Graph//.
	42	+Add permissions Click on //Add permission. //A page will open where you can request API permissions. In this step, you must select //Microsoft Graph/Intune//.
35	35
36	36	[[API permissions: Request Microsoft Graph>>image:68_Unternehmensanwendung registrieren_API-Berechtigungen Microsoft Graph anfordern_850.png||data-xwiki-image-style-alignment="center" height="722" width="701"]]
37	37
38	38	Depending on the area for which you want to grant authorisations, a distinction is made between ‘Delegated authorisations’ and ‘Application authorisations’. The tables below show the authorisations that you must insert here for the respective area.
39	39
	48	+=== Intune Management ===
	49	+
	50	+The following permissions are required to use Intune Management:
	51	+
	52	+**Intune**
	53	+
	54	+|**Type: Application**
	55	+|get_data_warehouse
	56	+|get_device_compliance
	57	+
	58	+(% class="wikigeneratedid" %)
	59	+**Microsoft Graph**
	60	+
	61	+|**Typ: Application**
	62	+|DeviceManagementApps.ReadWrite.All
	63	+|DeviceManagementConfiguration.Read.All
	64	+|DeviceManagementManagedDevices.PrivilegedOperations.All
	65	+|DeviceManagementManagedDevices.ReadWrite.All
	66	+|DeviceManagementServiceConfig.Read.All
	67	+|Group.ReadWrite.All
	68	+|GroupMember.ReadWrite.All
	69	+|User.ReadWrite.All
	70	+|Directory.ReadWrite.All
	71	+
40	40	=== Microsoft 365 ===
41	41
42	42	**Only the application permissions are required to use Microsoft 365. Insert the following values individually and repeat the procedure until both list entries have been added:**