deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-23 22:33:41 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

done

Browse Source
This commit is contained in:
Ben Alfasi
2020-01-07 15:04:46 +02:00
parent 2dc9a36f75
commit fcc3a5e1a4
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md
View File

@ -67,12 +67,13 @@ The following steps with guide you how to create an AAD application, get an acce
To determine which permission you need, please look at the **Permissions** section in the API you are interested to call. For instance: To determine which permission you need, please look at the **Permissions** section in the API you are interested to call. For instance:
- To [run advanced queries](run-advanced-query-api.md), select 'Run advanced queries' permission - To [run advanced queries](run-advanced-query-api.md), select 'Run advanced queries' permission
- To [isolate a machine](isolate-machine.md), select 'Isolate machine' permission
- In the following example we will use **'Read all alerts'** permission: - To [isolate a machine](isolate-machine.md), select 'Isolate machine' permission
- Choose **Application permissions** > **Alert.Read.All** > Click on **Add permissions** In the following example we will use **'Read all alerts'** permission:
Choose **Application permissions** > **Alert.Read.All** > Click on **Add permissions**
![Image of API access and API selection](images/application-permissions.png) ![Image of API access and API selection](images/application-permissions.png)
@ -210,7 +211,7 @@ Sanity check to make sure you got a correct token:
- Copy/paste into [JWT](https://jwt.ms) the token you get in the previous step in order to decode it - Copy/paste into [JWT](https://jwt.ms) the token you get in the previous step in order to decode it
- Validate you get a 'roles' claim with the desired permissions - Validate you get a 'roles' claim with the desired permissions
- In the screen shot below you can see a decoded token acquired from an Application with multiple permissions to Microsoft Defender ATP: - In the screen shot below you can see a decoded token acquired from an Application with multiple permissions to Microsoft Defender ATP:
- The "tid" claim is the tenant ID the token belongs. - The "tid" claim is the tenant ID the token belongs to.
![Image of token validation](images/webapp-decoded-token.png) ![Image of token validation](images/webapp-decoded-token.png)