Skip to content

Latest commit

 

History

History
47 lines (40 loc) · 3.07 KB

File metadata and controls

47 lines (40 loc) · 3.07 KB
title accessPackageResourceAttribute resource type
description A resource that exposes properties for the requestor of an access package to provide custom information that may be used to make approval decisions for the access package.
author markwahl-msft
ms.localizationpriority medium
ms.subservice entra-id-governance
doc_type resourcePageType
ms.date 07/22/2024

accessPackageResourceAttribute resource type

Namespace: microsoft.graph

An access package resource attribute defines a property that a user is required to have to be able to access an application. This structure is included in the attributes within an accessPackageResource of a catalog. It applies to applications whose roles are specified in an access package in that catalog. When you create a resourceRequest for the application, you can include attributes. If a user requests the access package including the application role, they must provide values for each attribute. If the request is approved, these attribute values are written in the user's directory object. The application can then read the attribute of the user.

For assignments to a user where the destination is an accessPackageUserDirectoryAttributeStore object type, then the attribute indicated by name must be a writable property of the user object. These writable properties are String types that are either built-in properties of the user or registered as extension properties on the target User object.

Properties

Property Type Description
destination accessPackageResourceAttributeDestination Information about how to set the attribute, currently a accessPackageUserDirectoryAttributeStore type.
name String The name of the attribute in the end system. If the destination is accessPackageUserDirectoryAttributeStore, then a user property such as jobTitle or a directory schema extension for the user object type, such as extension_2b676109c7c74ae2b41549205f1947ed_personalTitle.
source accessPackageResourceAttributeSource Information about how to populate the attribute value when an accessPackageAssignmentRequest is being fulfilled, currently a accessPackageResourceAttributeQuestion type.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.accessPackageResourceAttribute",
  "destination": {
    "@odata.type": "microsoft.graph.accessPackageResourceAttributeDestination"
  },
  "name": "String",
  "source": {
    "@odata.type": "microsoft.graph.accessPackageResourceAttributeSource"
  }
}