Skip to content

Commit a67363b

Browse files
DanipocketDanipocket
authored
Merge pull request #27748 from microsoftgraph/copilot/tame-crawdad
externalOriginResourceConnector and externalTokenBasedSapIagConnectionInfo SAP IAG integration Public Preview
2 parents 2f17cee + b905501 commit a67363b

20 files changed

Lines changed: 949 additions & 2 deletions

‎api-reference/beta/api/accesspackagecatalog-list-accesspackageresources.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ GET /identityGovernance/entitlementManagement/accessPackageCatalogs/{id}/accessP
3737

3838
## Optional query parameters
3939

40-
This method supports OData query parameters to help customize the response. For example, to retrieve the access package resource scopes and environments for each resource, include `$expand=accessPackageResourceScopes,accessPackageResourceEnvironment` in the query. To retrieve the available roles of a resource, include `$expand=accessPackageResourceRoles`. To retrieve only resources for applications and not groups or sites, include `$filter=resourceType eq 'Application'` in the query. For general information, see [OData query parameters](/graph/query-parameters).
40+
This method supports OData query parameters to help customize the response. For example, to retrieve the access package resource scopes and environments for each resource, include `$expand=accessPackageResourceScopes,accessPackageResourceEnvironment,externalOriginResourceConnector` in the query. To retrieve the available roles of a resource, include `$expand=accessPackageResourceRoles`. To retrieve only resources for applications and not groups or sites, include `$filter=resourceType eq 'Application'` in the query. For general information, see [OData query parameters](/graph/query-parameters).
4141

4242
## Request headers
4343

‎api-reference/beta/api/entitlementmanagement-list-externaloriginresourceconnectors.md‎

Lines changed: 113 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,113 @@
1+
---
2+
title: "List externalOriginResourceConnectors"
3+
description: "Get a list of externalOriginResourceConnector objects and their properties."
4+
author: "vikama-microsoft"
5+
ms.date: 02/23/2026
6+
ms.localizationpriority: medium
7+
ms.subservice: "entra-id-governance"
8+
doc_type: apiPageType
9+
---
10+
11+
# List externalOriginResourceConnectors
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Get a list of [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) objects and their properties.
18+
19+
## Permissions
20+
21+
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
22+
23+
<!-- {
24+
"blockType": "permissions",
25+
"name": "entitlementmanagement-list-externaloriginresourceconnectors-permissions"
26+
}
27+
-->
28+
[!INCLUDE [permissions-table](../includes/permissions/entitlementmanagement-list-externaloriginresourceconnectors-permissions.md)]
29+
30+
## HTTP request
31+
32+
<!-- {
33+
"blockType": "ignored"
34+
}
35+
-->
36+
``` http
37+
GET /identityGovernance/entitlementManagement/externalOriginResourceConnectors
38+
```
39+
40+
## Optional query parameters
41+
42+
This method supports some of the OData query parameters to help customize the response. For general information, see [OData query parameters](/graph/query-parameters).
43+
44+
## Request headers
45+
46+
|Name|Description|
47+
|:---|:---|
48+
|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
49+
50+
## Request body
51+
52+
Don't supply a request body for this method.
53+
54+
## Response
55+
56+
If successful, this method returns a `200 OK` response code and a collection of [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) objects in the response body.
57+
58+
## Examples
59+
60+
### Request
61+
62+
The following example shows a request.
63+
<!-- {
64+
"blockType": "request",
65+
"name": "list_externaloriginresourceconnector"
66+
}
67+
-->
68+
``` http
69+
GET https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/externalOriginResourceConnectors
70+
```
71+
72+
73+
### Response
74+
75+
The following example shows the response.
76+
>**Note:** The response object shown here might be shortened for readability.
77+
<!-- {
78+
"blockType": "response",
79+
"truncated": true,
80+
"@odata.type": "microsoft.graph.externalOriginResourceConnector"
81+
}
82+
-->
83+
``` http
84+
HTTP/1.1 200 OK
85+
Content-Type: application/json
86+
87+
{
88+
"value": [
89+
{
90+
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
91+
"id": "375db7fb-280f-5d24-1abd-c63e0311c131",
92+
"displayName": "SAP Access Control",
93+
"description": "SAP Access Control connector",
94+
"connectorType": "sapAc",
95+
"connectionInfo": {
96+
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
97+
"url": "dev.test",
98+
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
99+
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
100+
"keyVaultName": "Keyvault",
101+
"secretName": "Test",
102+
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
103+
"resourceGroup": "SAPIAG Group"
104+
},
105+
"createdBy": "admin@contoso.com",
106+
"createdDateTime": "2026-02-23T10:15:30Z",
107+
"modifiedBy": "admin@contoso.com",
108+
"modifiedDateTime": "2026-02-23T10:15:30Z"
109+
}
110+
]
111+
}
112+
```
113+

‎api-reference/beta/api/entitlementmanagement-post-accesspackageresourcerequests.md‎

Lines changed: 76 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -626,6 +626,82 @@ Content-type: application/json
626626
"requestStatus": "Fulfilled"
627627
}
628628
```
629+
630+
631+
### Example 7: Create an accessPackageResourceRequest for adding a SAP IAG Access Rights as a resource
632+
633+
#### Request
634+
635+
The following example shows a request for adding an external origin resource connector to a catalog, including specifying a required attribute of that resource connector.
636+
637+
<!-- {
638+
"blockType": "request",
639+
"name": "create_accesspackageresourcerequest_from_accesspackageresourcerequests_connector"
640+
}-->
641+
```http
642+
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackageResourceRequests
643+
Content-type: application/json
644+
645+
{
646+
"catalogId": "bcb19bf7-cdf7-4a70-a106-f6543620b2a5",
647+
"accessPackageResource": {
648+
"id": "88eb460d-ca08-4eb9-afae-8d60a8b00377",
649+
"displayName": "SAP IAG Access Rights",
650+
"description": "This resource represents the business roles of SAP IAG",
651+
"resourceType": "Business role",
652+
"originId": "https://iagintgorg-iag-intg-space-java-rest-arqapi.cfapps.sap.hana.ondemand.com",
653+
"originSystem": "External",
654+
"accessPackageResourceScopes": [],
655+
"externalOriginResourceConnector": {
656+
"id": "1a53cea5-48bd-467c-af81-a24245b0df2b",
657+
"displayName": "SAP IAG 10.0",
658+
"description": "SAP IAG 10.0.0",
659+
"connectorType": "sapIag",
660+
"connectionInfo": {
661+
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
662+
"url": "https://iagigorg-iag-intg-space-java-rest-arqapi.cfapps.sap.hana.ondemand.com",
663+
"subscriptionId": "8e072eb5-73f5-4ed2-9324-a734dcb9728",
664+
"resourceGroup": "SAPResourceGroup",
665+
"accessTokenUrl": "https://entra-docu-intg-mrrd3gv.authentication.sap.hana.ondemand.com/oauth/token",
666+
"clientId": "sb-72062308-a7ae-456f-b9a4-24302b8a4aa!b247012|iagapi-iag-intg-space!b11378",
667+
"keyVaultName": "SAPIAG-KV",
668+
"secretName": "ClientSecret"
669+
}
670+
},
671+
"accessPackageResourceEnvironment": null
672+
},
673+
"requestType": "AdminAdd",
674+
"history": [],
675+
"executeImmediately": true
676+
}
677+
678+
```
679+
680+
681+
682+
#### Response
683+
684+
The following example shows the response.
685+
686+
> **Note:** The response object shown here might be shortened for readability.
687+
688+
<!-- {
689+
"blockType": "response",
690+
"truncated": true,
691+
"@odata.type": "microsoft.graph.accessPackageResourceRequest"
692+
} -->
693+
694+
```http
695+
HTTP/1.1 201 Created
696+
Content-type: application/json
697+
698+
{
699+
"id": "0e37f047-c6b9-4d5c-99cd-e3fab4007be4",
700+
"requestType": "AdminAdd",
701+
"requestState": "Delivered",
702+
"requestStatus": "Fulfilled"
703+
}
704+
```
629705
<!-- uuid: 16cd6b66-4b1a-43a1-adaf-3a886856ed98
630706
2019-02-04 14:57:30 UTC -->
631707
<!-- {

‎api-reference/beta/api/entitlementmanagement-post-externaloriginresourceconnectors.md‎

Lines changed: 136 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,136 @@
1+
---
2+
title: "Create externalOriginResourceConnector"
3+
description: "Create a new externalOriginResourceConnector object."
4+
author: "vikama-microsoft"
5+
ms.date: 02/23/2026
6+
ms.localizationpriority: medium
7+
ms.subservice: "entra-id-governance"
8+
doc_type: apiPageType
9+
---
10+
11+
# Create externalOriginResourceConnector
12+
13+
Namespace: microsoft.graph
14+
15+
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
16+
17+
Creates a new [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) object.
18+
19+
## Permissions
20+
21+
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
22+
23+
<!-- {
24+
"blockType": "permissions",
25+
"name": "entitlementmanagement-post-externaloriginresourceconnectors-permissions"
26+
}
27+
-->
28+
29+
[!INCLUDE [permissions-table](../includes/permissions/entitlementmanagement-post-externaloriginresourceconnectors-permissions.md)]
30+
31+
## HTTP request
32+
33+
<!-- {
34+
"blockType": "ignored"
35+
}
36+
-->
37+
``` http
38+
POST /identityGovernance/entitlementManagement/externalOriginResourceConnectors
39+
```
40+
41+
## Request headers
42+
43+
|Name|Description|
44+
|:---|:---|
45+
|Authorization|Bearer {token}. Required. Learn more about [authentication and authorization](/graph/auth/auth-concepts).|
46+
|Content-Type|application/json. Required.|
47+
48+
## Request body
49+
50+
In the request body, supply a JSON representation of the [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) object.
51+
52+
You can specify the following properties when creating an **externalOriginResourceConnector**.
53+
54+
|Property|Type|Description|
55+
|:---|:---|:---|
56+
|connectionInfo|[connectionInfo](../resources/connectioninfo.md)|The connection information for the external origin resource connector. Required.|
57+
|connectorType|connectorType|The type of connector. The possible values are: `sapIag`, `sapAc`, `unknownFutureValue`. Required.|
58+
|description|String|The description of the external origin resource connector. Optional.|
59+
|displayName|String|The display name of the external origin resource connector. Optional.|
60+
61+
62+
63+
## Response
64+
65+
If successful, this method returns a `201 Created` response code and an [externalOriginResourceConnector](../resources/externaloriginresourceconnector.md) object in the response body.
66+
67+
## Examples
68+
69+
### Request
70+
71+
The following example shows a request.
72+
<!-- {
73+
"blockType": "request",
74+
"name": "create_externaloriginresourceconnector_from_"
75+
}
76+
-->
77+
``` http
78+
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/externalOriginResourceConnectors
79+
Content-Type: application/json
80+
81+
{
82+
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
83+
"displayName": "SAP Access Control",
84+
"description": "SAP Access Control connector",
85+
"connectorType": "sapAc",
86+
"connectionInfo": {
87+
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
88+
"url": "dev.test",
89+
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
90+
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
91+
"keyVaultName": "Keyvault",
92+
"secretName": "Test",
93+
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
94+
"resourceGroup": "SAPIAG Group"
95+
}
96+
}
97+
```
98+
99+
100+
### Response
101+
102+
The following example shows the response.
103+
>**Note:** The response object shown here might be shortened for readability.
104+
<!-- {
105+
"blockType": "response",
106+
"truncated": true,
107+
"@odata.type": "microsoft.graph.externalOriginResourceConnector"
108+
}
109+
-->
110+
``` http
111+
HTTP/1.1 201 Created
112+
Content-Type: application/json
113+
114+
{
115+
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
116+
"id": "375db7fb-280f-5d24-1abd-c63e0311c131",
117+
"displayName": "SAP Access Control",
118+
"description": "SAP Access Control connector",
119+
"connectorType": "sapAc",
120+
"connectionInfo": {
121+
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
122+
"url": "dev.test",
123+
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
124+
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
125+
"keyVaultName": "Keyvault",
126+
"secretName": "Test",
127+
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
128+
"resourceGroup": "SAPIAG Group"
129+
},
130+
"createdBy": "admin@contoso.com",
131+
"createdDateTime": "2026-02-23T10:15:30Z",
132+
"modifiedBy": "admin@contoso.com",
133+
"modifiedDateTime": "2026-02-23T10:15:30Z"
134+
}
135+
```
136+

0 commit comments

Comments
 (0)