Skip to content

Commit df4eafa

Browse files
Merge pull request #207261 from OWinfreyATL/owinfreyATL-access-package-create
Access Package create document freshness check
2 parents c718292 + 5c25471 commit df4eafa

File tree

1 file changed

+18
-18
lines changed

1 file changed

+18
-18
lines changed

articles/active-directory/governance/entitlement-management-access-package-create.md

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Create a new access package in entitlement management - Azure AD
33
description: Learn how to create a new access package of resources you want to share in Azure Active Directory entitlement management.
44
services: active-directory
55
documentationCenter: ''
6-
author: owinfreyatl
6+
author: owinfreyATL
77
manager: karenhoran
88
editor:
99
ms.service: active-directory
@@ -26,10 +26,10 @@ An access package enables you to do a one-time setup of resources and policies t
2626

2727
## Overview
2828

29-
All access packages must be put in a container called a catalog. A catalog defines what resources you can add to your access package. If you don't specify a catalog, your access package will be put into the General catalog. Currently, you can't move an existing access package to a different catalog.
29+
All access packages must be put in a container called a catalog. A catalog defines what resources you can add to your access package. If you don't specify a catalog, your access package will be put into the general catalog. Currently, you can't move an existing access package to a different catalog.
3030

3131
An access package can be used to assign access to roles of multiple resources that are in the catalog. If you're an administrator or catalog owner, you can add resources to the catalog while creating an access package.
32-
If you are an access package manager, you cannot add resources you own to a catalog. You are restricted to using the resources available in the catalog. If you need to add resources to a catalog, you can ask the catalog owner.
32+
If you're an access package manager, you can't add resources you own to a catalog. You're restricted to using the resources available in the catalog. If you need to add resources to a catalog, you can ask the catalog owner.
3333

3434
All access packages must have at least one policy for users to be assigned to the access package. Policies specify who can request the access package and also approval and lifecycle settings. When you create a new access package, you can create an initial policy for users in your directory, for users not in your directory, for administrator direct assignments only, or you can choose to create the policy later.
3535

@@ -55,11 +55,11 @@ Here are the high-level steps to create a new access package.
5555

5656
1. Sign in to the [Azure portal](https://portal.azure.com).
5757

58-
1. Click **Azure Active Directory** and then click **Identity Governance**.
58+
1. Select **Azure Active Directory** and then select **Identity Governance**.
5959

60-
1. In the left menu, click **Access packages**.
60+
1. In the left menu, select **Access packages**.
6161

62-
1. Click **New access package**.
62+
1. Select **New access package**.
6363

6464
![Entitlement management in the Azure portal](./media/entitlement-management-shared/access-packages-list.png)
6565

@@ -71,39 +71,39 @@ On the **Basics** tab, you give the access package a name and specify which cata
7171

7272
1. In the **Catalog** drop-down list, select the catalog you want to create the access package in. For example, you might have a catalog owner that manages all the marketing resources that can be requested. In this case, you could select the marketing catalog.
7373

74-
You will only see catalogs you have permission to create access packages in. To create an access package in an existing catalog, you must be a Global administrator, Identity Governance administrator or User administrator, or you must be a catalog owner or access package manager in that catalog.
74+
You'll only see catalogs you have permission to create access packages in. To create an access package in an existing catalog, you must be either a Global administrator, Identity Governance administrator or User administrator, or you must be a catalog owner or access package manager in that catalog.
7575

7676
![Access package - Basics](./media/entitlement-management-access-package-create/basics.png)
7777

78-
If you are a Global administrator, an Identity Governance administrator, a User administrator, or catalog creator and you would like to create your access package in a new catalog that's not listed, click **Create new catalog**. Enter the Catalog name and description and then click **Create**.
78+
If you're a Global administrator, an Identity Governance administrator, a User administrator, or catalog creator and you would like to create your access package in a new catalog that's not listed, select **Create new catalog**. Enter the Catalog name and description and then select **Create**.
7979

80-
The access package you are creating and any resources included in it will be added to the new catalog. You can also add additional catalog owners later and add attributes to the resources you put in the catalog. Read [Add resource attributes in the catalog](entitlement-management-catalog-create.md#add-resource-attributes-in-the-catalog) to learn more about how to edit the attributes list for a specific catalog resource and the prerequisite roles.
80+
The access package you're creating, and any resources included in it, will be added to the new catalog. You can also add additional catalog owners later, and add attributes to the resources you put in the catalog. Read [Add resource attributes in the catalog](entitlement-management-catalog-create.md#add-resource-attributes-in-the-catalog) to learn more about how to edit the attributes list for a specific catalog resource and the prerequisite roles.
8181

82-
1. Click **Next**.
82+
1. Select **Next**.
8383

8484
## Resource roles
8585

8686
On the **Resource roles** tab, you select the resources to include in the access package. Users who request and receive the access package will receive all the resource roles, such as group membership, in the access package.
8787

8888
If you're not sure which resource roles to include, you can skip adding resource roles while creating the access package, and then [add resource roles](entitlement-management-access-package-resources.md) after you've created the access package.
8989

90-
1. Click the resource type you want to add (**Groups and Teams**, **Applications**, or **SharePoint sites**).
90+
1. Select the resource type you want to add (**Groups and Teams**, **Applications**, or **SharePoint sites**).
9191

9292
1. In the Select pane that appears, select one or more resources from the list.
9393

9494
![Access package - Resource roles](./media/entitlement-management-access-package-create/resource-roles.png)
9595

96-
If you are creating the access package in the General catalog or a new catalog, you will be able to pick any resource from the directory that you own. You must be at least a Global administrator, a User administrator, or Catalog creator.
96+
If you're creating the access package in the General catalog or a new catalog, you'll be able to pick any resource from the directory that you own. You must be at least a Global administrator, a User administrator, or Catalog creator.
9797

98-
If you are creating the access package in an existing catalog, you can select any resource that is already in the catalog without owning it.
98+
If you're creating the access package in an existing catalog, you can select any resource that is already in the catalog without owning it.
9999

100-
If you are a Global administrator, a User administrator, or catalog owner, you have the additional option of selecting resources you own that are not yet in the catalog. If you select resources not currently in the selected catalog, these resources will also be added to the catalog for other catalog administrators to build access packages with. To see all the resources that can be added to the catalog, check the **See all** check box at the top of the Select pane. If you only want to select resources that are currently in the selected catalog, leave the check box **See all** unchecked (default state).
100+
If you're a Global administrator, a User administrator, or catalog owner, you have the additional option of selecting resources you own that aren't yet in the catalog. If you select resources not currently in the selected catalog, these resources will also be added to the catalog for other catalog administrators to build access packages with. To see all the resources that can be added to the catalog, check the **See all** check box at the top of the Select pane. If you only want to select resources that are currently in the selected catalog, leave the check box **See all** unchecked (default state).
101101

102102
1. Once you've selected the resources, in the **Role** list, select the role you want users to be assigned for the resource. For more information on selecting the appropriate roles for a resource, read [add resource roles](entitlement-management-access-package-resources.md#add-resource-roles).
103103

104104
![Access package - Resource role selection](./media/entitlement-management-access-package-create/resource-roles-role.png)
105105

106-
1. Click **Next**.
106+
1. Select **Next**.
107107

108108
>[!NOTE]
109109
>You can add dynamic groups to a catalog and to an access package. However, you will be able to select only the Owner role when managing a dynamic group resource in an access package.
@@ -128,16 +128,16 @@ On the **Review + create** tab, you can review your settings and check for any v
128128

129129
![Access package - Enable policy setting](./media/entitlement-management-access-package-create/review-create.png)
130130

131-
1. Click **Create** to create the access package.
131+
1. Select **Create** to create the access package.
132132

133133
The new access package appears in the list of access packages.
134134

135135
## Creating an access package programmatically
136136

137137
You can also create an access package using Microsoft Graph. A user in an appropriate role with an application that has the delegated `EntitlementManagement.ReadWrite.All` permission can call the API to
138138

139-
1. [List the accessPackageResources in the catalog](/graph/api/entitlementmanagement-list-accesspackagecatalogs?tabs=http&view=graph-rest-beta&preserve-view=true) and [create an accessPackageResourceRequest](/graph/api/entitlementmanagement-post-accesspackageresourcerequests?tabs=http&view=graph-rest-beta&preserve-view=true) for any resources that are not yet in the catalog.
140-
1. [List the accessPackageResourceRoles](/graph/api/accesspackage-list-accesspackageresourcerolescopes?tabs=http&view=graph-rest-beta&preserve-view=true) of each accessPackageResource in an accessPackageCatalog. This list of roles will then be used to select a role, when subsequently creating an accessPackageResourceRoleScope.
139+
1. [List the accessPackageResources in the catalog](/graph/api/entitlementmanagement-list-accesspackagecatalogs?tabs=http&view=graph-rest-beta&preserve-view=true) and [create an accessPackageResourceRequest](/graph/api/entitlementmanagement-post-accesspackageresourcerequests?tabs=http&view=graph-rest-beta&preserve-view=true) for any resources that aren't yet in the catalog.
140+
1. [List the accessPackageResourceRoles](/graph/api/accesspackage-list-accesspackageresourcerolescopes?tabs=http&view=graph-rest-beta&preserve-view=true) of each accessPackageResource in an accessPackageCatalog. This list of roles will then be used to select a role, when later creating an accessPackageResourceRoleScope.
141141
1. [Create an accessPackage](/graph/tutorial-access-package-api).
142142
1. [Create an accessPackageAssignmentPolicy](/graph/api/entitlementmanagement-post-accesspackageassignmentpolicies?tabs=http&view=graph-rest-beta&preserve-view=true) for each policy needed in the access package.
143143
1. [Create an accessPackageResourceRoleScope](/graph/api/accesspackage-post-accesspackageresourcerolescopes?tabs=http&view=graph-rest-beta&preserve-view=true) for each resource role needed in the access package.

0 commit comments

Comments
 (0)