delegated_permission_classifications

Creates, updates, deletes, gets or lists a delegated_permission_classifications resource.

Overview

Name	delegated_permission_classifications
Type	Resource
Id	entra_id.service_principals.delegated_permission_classifications

Fields

The following fields are returned by SELECT queries:

get

Retrieved navigation property

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
classification		The classification value. Possible values: low, medium (preview), high (preview). Doesn't support $filter.
permissionId	string	The unique identifier (id) for the delegated permission listed in the oauth2PermissionScopes collection of the servicePrincipal. Required on create. Doesn't support $filter.
permissionName	string	The claim value (value) for the delegated permission listed in the oauth2PermissionScopes collection of the servicePrincipal. Doesn't support $filter.

list

Retrieved collection

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
classification		The classification value. Possible values: low, medium (preview), high (preview). Doesn't support $filter.
permissionId	string	The unique identifier (id) for the delegated permission listed in the oauth2PermissionScopes collection of the servicePrincipal. Required on create. Doesn't support $filter.
permissionName	string	The claim value (value) for the delegated permission listed in the oauth2PermissionScopes collection of the servicePrincipal. Doesn't support $filter.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	service_principal_id, delegated_permission_classification_id
list	select	service_principal_id		Retrieve the list of delegatedPermissionClassification currently configured for the delegated permissions exposed by an API.
insert	insert	service_principal_id		Classify a delegated permission by adding a delegatedPermissionClassification to the servicePrincipal representing the API.
update	update	service_principal_id, delegated_permission_classification_id
delete	delete	service_principal_id, delegated_permission_classification_id	If-Match	Deletes a delegatedPermissionClassification which had previously been set for a delegated permission.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
delegated_permission_classification_id	string	The unique identifier of delegatedPermissionClassification
service_principal_id	string	The unique identifier of servicePrincipal
If-Match	string	ETag

SELECT examples

get

Retrieved navigation property

SELECT
id,
classification,
permissionId,
permissionName
FROM entra_id.service_principals.delegated_permission_classifications
WHERE service_principal_id = '{{ service_principal_id }}' -- required
AND delegated_permission_classification_id = '{{ delegated_permission_classification_id }}' -- required
;

list

Retrieve the list of delegatedPermissionClassification currently configured for the delegated permissions exposed by an API.

SELECT
id,
classification,
permissionId,
permissionName
FROM entra_id.service_principals.delegated_permission_classifications
WHERE service_principal_id = '{{ service_principal_id }}' -- required
;

INSERT examples

insert

Classify a delegated permission by adding a delegatedPermissionClassification to the servicePrincipal representing the API.

INSERT INTO entra_id.service_principals.delegated_permission_classifications (
id,
classification,
permissionId,
permissionName,
service_principal_id
)
SELECT 
'{{ id }}',
'{{ classification }}',
'{{ permissionId }}',
'{{ permissionName }}',
'{{ service_principal_id }}'
RETURNING
id,
classification,
permissionId,
permissionName
;

Manifest

# Description fields are for documentation purposes
- name: delegated_permission_classifications
props:
  - name: service_principal_id
    value: "{{ service_principal_id }}"
    description: Required parameter for the delegated_permission_classifications resource.
  - name: id
    value: "{{ id }}"
    description: |
      The unique identifier for an entity. Read-only.
  - name: classification
    value: "{{ classification }}"
    description: |
      The classification value. Possible values: low, medium (preview), high (preview). Doesn't support $filter.
  - name: permissionId
    value: "{{ permissionId }}"
    description: |
      The unique identifier (id) for the delegated permission listed in the oauth2PermissionScopes collection of the servicePrincipal. Required on create. Doesn't support $filter.
  - name: permissionName
    value: "{{ permissionName }}"
    description: |
      The claim value (value) for the delegated permission listed in the oauth2PermissionScopes collection of the servicePrincipal. Doesn't support $filter.

UPDATE examples

update

No description available.

UPDATE entra_id.service_principals.delegated_permission_classifications
SET 
id = '{{ id }}',
classification = '{{ classification }}',
permissionId = '{{ permissionId }}',
permissionName = '{{ permissionName }}'
WHERE 
service_principal_id = '{{ service_principal_id }}' --required
AND delegated_permission_classification_id = '{{ delegated_permission_classification_id }}' --required
RETURNING
id,
classification,
permissionId,
permissionName;

DELETE examples

delete

Deletes a delegatedPermissionClassification which had previously been set for a delegated permission.

DELETE FROM entra_id.service_principals.delegated_permission_classifications
WHERE service_principal_id = '{{ service_principal_id }}' --required
AND delegated_permission_classification_id = '{{ delegated_permission_classification_id }}' --required
AND If-Match = '{{ If-Match }}'
;