You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/manage-apps/custom-security-attributes-apps.md
+23-19Lines changed: 23 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Assign, update, list, or remove custom security attributes for an application (Preview) - Azure Active Directory
2
+
title: Manage custom security attributes for an application (Preview) - Azure Active Directory
3
3
description: Assign, update, list, or remove custom security attributes for an application that has been registered with your Azure Active Directory (Azure AD) tenant.
# Assign, update, list, or remove custom security attributes for an application (Preview)
17
+
# Manage custom security attributes for an application (Preview)
18
18
19
19
> [!IMPORTANT]
20
20
> Custom security attributes are currently in PREVIEW.
@@ -34,7 +34,11 @@ To assign or remove custom security attributes for an application in your Azure
34
34
> [!IMPORTANT]
35
35
> By default, [Global Administrator](../roles/permissions-reference.md#global-administrator) and other administrator roles don't have permissions to read, define, or assign custom security attributes.
36
36
37
-
## Assign custom security attributes to an application
37
+
## Assign, update, list, or remove custom attributes for an application
38
+
39
+
Learn how to work with custom attributes for applications in Azure AD.
40
+
### Assign custom security attributes to an application
41
+
38
42
39
43
:::zone pivot="portal"
40
44
@@ -64,7 +68,7 @@ Undertake the following steps to assign custom security attributes through the A
64
68
65
69
1. When finished, select **Save** to assign the custom security attributes to the application.
66
70
67
-
## Update custom security attribute assignment values for an application
71
+
###Update custom security attribute assignment values for an application
68
72
69
73
1. Sign in to the [Azure portal](https://portal.azure.com) or [Azure AD admin center](https://aad.portal.azure.com).
70
74
@@ -82,7 +86,7 @@ Undertake the following steps to assign custom security attributes through the A
82
86
83
87
1. When finished, select **Save**.
84
88
85
-
## Filter applications based on custom security attributes
89
+
###Filter applications based on custom security attributes
86
90
87
91
You can filter the list of custom security attributes assigned to applications on the **All applications** page.
88
92
@@ -106,7 +110,7 @@ You can filter the list of custom security attributes assigned to applications o
106
110
107
111
1. To apply the filter, select **Apply**.
108
112
109
-
## Remove custom security attribute assignments from applications
113
+
###Remove custom security attribute assignments from applications
110
114
111
115
1. Sign in to the [Azure portal](https://portal.azure.com) or [Azure AD admin center](https://aad.portal.azure.com).
112
116
@@ -123,11 +127,11 @@ You can filter the list of custom security attributes assigned to applications o
123
127
:::zone-end
124
128
125
129
:::zone pivot="aad-powershell"
126
-
## PowerShell
130
+
###PowerShell
127
131
128
132
To manage custom security attribute assignments for applications in your Azure AD organization, you can use PowerShell. The following commands can be used to manage assignments.
129
133
130
-
## Assign a custom security attribute with a multi-string value to an application (service principal)
134
+
###Assign a custom security attribute with a multi-string value to an application (service principal)
131
135
132
136
Use the [Set-AzureADMSServicePrincipal](/powershell/module/azuread/set-azureadmsserviceprincipal) command to assign a custom security attribute with a multi-string value to an application (service principal).
## Update a custom security attribute with a multi-string value for an application (service principal)
154
+
###Update a custom security attribute with a multi-string value for an application (service principal)
151
155
152
156
Provide the new set of attribute values that you would like to reflect on the application. In this example, we're adding one more value for project attribute.
## Get the custom security attribute assignments for an application (service principal)
174
+
###Get the custom security attribute assignments for an application (service principal)
171
175
172
176
Use the [Get-AzureADMSServicePrincipal](/powershell/module/azuread/get-azureadmsserviceprincipal) command to get the custom security attribute assignments for an application (service principal).
To manage custom security attribute assignments for applications in your Azure AD organization, you can use Microsoft Graph PowerShell. The following commands can be used to manage assignments.
184
188
185
-
## Assign a custom security attribute with a multi-string value to an application (service principal)
189
+
###Assign a custom security attribute with a multi-string value to an application (service principal)
186
190
187
191
Use the [Set-AzureADMSServicePrincipal](/powershell/module/azuread/set-azureadmsserviceprincipal) command to assign a custom security attribute with a multi-string value to an application (service principal).
## Update a custom security attribute with a multi-string value for an application (service principal)
217
+
###Update a custom security attribute with a multi-string value for an application (service principal)
214
218
215
219
Provide the new set of attribute values that you would like to reflect on the application. In this example, we're adding one more value for project attribute.
To manage custom security attribute assignments for applications in your Azure AD organization, you can use the Microsoft Graph API. Make the following API calls to manage assignments.
263
267
264
268
For other similar Microsoft Graph API examples for users, see [Assign, update, list, or remove custom security attributes for a user](../enterprise-users/users-custom-security-attributes.md#microsoft-graph-api) and [Examples: Assign, update, list, or remove custom security attribute assignments using the Microsoft Graph API](/graph/custom-security-attributes-examples).
265
269
266
-
## Assign a custom security attribute with a multi-string value to an application (service principal)
270
+
###Assign a custom security attribute with a multi-string value to an application (service principal)
267
271
268
272
Use the [Update servicePrincipal](/graph/api/serviceprincipal-update?view=graph-rest-beta&preserve-view=true) API to assign a custom security attribute with a string value to an application.
## Update a custom security attribute with a multi-string value for an application (service principal)
298
+
###Update a custom security attribute with a multi-string value for an application (service principal)
295
299
296
300
Provide the new set of attribute values that you would like to reflect on the application. In this example, we're adding one more value for project attribute.
## Filter applications based on custom security attributes
319
+
###Filter applications based on custom security attributes
316
320
317
321
This example filters a list of applications with a custom security attribute assignment that equals the specified value.
318
322
319
323
```http
320
324
GET https://graph.microsoft.com/beta/servicePrincipals?$count=true&$select=id,displayName,customSecurityAttributes&$filter=customSecurityAttributes/Engineering/Project eq 'Baker'ConsistencyLevel: eventual
321
325
```
322
326
323
-
## Remove custom security attribute assignments from an application
327
+
###Remove custom security attribute assignments from an application
324
328
325
329
In this example, we remove a custom security attribute assignment that supports multiple values.
0 commit comments