azure - Azure Active Directory - 获取租户列表

Question

我知道 Powershell cmdlet Get-AzTenant和REST API 调用 GET https://management.azure.com/tenants?api-version=2019-06-01来查询 AD 租户 wrt 当前用户上下文。

由于这需要使用 Azure 资源管理的 user_impersonation，是否有替代方法，即 Microsoft Graph？

使用此租户列表的示例

• Microsoft 访问面板
  https://account.activedirectory.windowsazure.com/r#/profile/organizations
  POST https://account.activedirectory.windowsazure.com/responsive/multidirectoryinfo
• Azure DevOps 配置文件
  https://aex.dev.azure.com/me
• Azure 门户
  发布https://portal.azure.com/api/directories/List

标签： azurepowershellazure-active-directorymicrosoft-graph-api

Answer 1

No, there is no such API in Microsoft Graph or Azure AD Graph.

I want to use the an API that needs less permissions than user_impersonation wrt management.azure.com.

Besides, I think the delegated permission user_impersonation is not large, when the user login the app and consent the permission, the app just calls the API as the user. The permissions are all from and decided by the user, not the app.