Skip to content

Commit adca7be

Browse files
committed
updates
1 parent efab1ad commit adca7be

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/aks/aad-integration-v2.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.date: 03/24/2020
1010
# Integrate Azure AD v2.0 in Azure Kubernetes Service (Preview)
1111

1212
> [!Note]
13-
> Existing Azure AD v1.0 clusters are not affected by the new Azure AD v2.0 feature for AKS.
13+
> Existing Azure AD v1.0 clusters are not affected by the new Azure AD v2.0 feature for Azure Kubernetes Service (AKS).
1414
1515
Azure AD v2.0 is designed to simplify the Azure AD v1.0 experience, where users were required to create a client app, a server app, and required the Azure AD tenant to grant Directory Read permissions.
1616
In the new version, the AKS resource provider manages the client and server apps for you. Instead of using a persistent "Application Permission," the AKS resource provider uses a "Delegated Permission" via an on-behalf-of flow to get an access token to Graph API. Azure AD v2.0 enabled clusters use a limited scoped Graph API privilege (GroupMembers.Read.All) to query group membership only when the overage indicator is present (when there are more than 250 group claims).

0 commit comments

Comments
 (0)