azure - 删除使用 azure AD 中的 "Grant Permissions"按钮授予明确同意

Question

当某个应用在 Azure 广告中注册时，为了向该应用授予权限，我们可以通过点击“授予权限”按钮代表您租户中的所有用户授予应用程序的委派权限。一旦授予该权限，如何撤消该权限？或者，一旦单击就无法从 azure 门户撤消？我很困惑，因为它总是具有相同的颜色，并且总是询问“您想授予...”对话框，而“否”不会撤消该操作。

Answer 1

可以通过 Azure 门户撤销租户广泛同意。

请参见此处:Revoking Consent for Azure Active Directory Applications

Using the Azure Portal to Remove Tenant Wide Consent

If you are a tenant administrator, and you want to revoke consent for an application across your entire tenant, you can go to the Azure Portal. Whether it be for a bunch of users who individually consented or for an admin who consented on behalf of all the users, by simply deleting the application’s service principal, you will remove all delegation entries (the object used to store consent) for that application. Think about removing the service principal like uninstalling the application from your tenant.

You could delete the service principal a bunch of different ways like through Azure Active Directory PowerShell or through the Microsoft Graph API, but the easiest way for the average administrator is right through the Azure Portal.

Navigate to the Enterprise Applications blade in the Azure portal:

Then click “All Applications” and search for the application you want to revoke consent for:

When you click the application, you will be brought to an “Overview” section, where a tempting button called “Delete” will be at the top. Before you click this button, you might want to take a peak at the “Permissions” section to see the types of consent that was granted to this application:

Once you feel confident that you want to delete this application, go back to “Overview” and click “Delete”!

Viola! The app and all consent associated with that app is now gone.

实际博客文章中包含一些屏幕截图。

希望这会有所帮助!