azure - 针对 ManagedAppPolicies 端点而非其他端点(即组)的 Intune API 请求收到 403

Question

以下是我们运行的查询。它们都是 beta 端点，但我无法对 ManagedAppPolicies 端点进行身份验证。之前的相同授权详细信息也有效。权限有变化吗？

https://graph.microsoft.com/beta/managedAppPolicies/
Accept: application/json
Authorization: Bearer ------

Response:
{
  "error": {
    "code": "Forbidden",
    "message": "Application is not authorized to perform this operation - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: b8c9fdff-b1f5-4f36-847e-d31d35c81f65 - Url: https://fef.amsua0502.manage.microsoft.com/MAMAdmin/MAMAdminFEService/managedAppPolicies?api-version=2016-06-16 - CustomApiErrorPhrase: ",
    "innerError": {
      "request-id": "b8c9fdff-b1f5-4f36-847e-d31d35c81f65",
      "date": "2017-05-12T14:50:24"
    }
  }
}

-----------------------------
https://graph.microsoft.com/beta/groups
 - THIS WORKS FINE
Accept: application/json
Authorization: Bearer -------

Response:
{
  "@odata.context": "https://graph.microsoft.com/beta/$metadata#groups",
  "value": [
    {
      "id": "480535ce-03c5-421d-a350-fb7e133b9dc3",
      "deletedDateTime": null,
      "classification": null,
      "createdDateTime": "2017-02-23T07:51:24Z",
      "description": "Self help community for library",
      "displayName": "Library Assist",
      "groupTypes": [
        "Unified"
      ],
      "mail": "<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="a6cacfc4d4c7d4dfe6c3d0c9cbc9c4cfcacfd2df88c9c8cbcfc5d4c9d5c9c0d288c5c9cb" rel="noreferrer noopener nofollow">[email protected]</a>",
      "mailEnabled": true,
      "mailNickname": "library",
      "membershipRule": null,
      "membershipRuleProcessingState": null,
      "onPremisesLastSyncDateTime": null,
      "onPremisesProvisioningErrors": [],
      "onPremisesSecurityIdentifier": null,
      "onPremisesSyncEnabled": null,
      "preferredLanguage": null,
      "proxyAddresses": [
        "SMTP:<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="2844414a5a495a51684d5e4745474a4144415c5106474645414b5a475b474e5c064b4745" rel="noreferrer noopener nofollow">[email protected]</a>"
      ],
      "renewedDateTime": "2017-02-23T07:51:24Z",
      "resourceBehaviorOptions": [],
      "resourceProvisioningOptions": [],
      "securityEnabled": false,
      "theme": null,
      "visibility": "Public"
    },
    {
      "id": "548dc0b3-316f-41e1-8bda-e50b70e446ac",
      "deletedDateTime": null,
      "classification": null,
      "createdDateTime": "2017-03-08T21:07:26Z",
      "description": "This is an updated description",
      "displayName": "CDB TEST USER GROUP 1",
      "groupTypes": [
        "Unified"
      ],
      "mail": "<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="ae989b9a989d99cc9b83cd9ccdca839a9b9a9c83cc9796ca839dca969b99c89a979699cac8eecbd8c1c3c1ccc7c2c7dad780c1c0c3c7cddcc1ddc1c8da80cdc1c3" rel="noreferrer noopener nofollow">[email protected]</a>",
      "mailEnabled": true,
      "mailNickname": "654637b5-c2cd-4542-b98d-3d857f4987df",
      "membershipRule": null,
      "membershipRuleProcessingState": null,
      "onPremisesLastSyncDateTime": null,
      "onPremisesProvisioningErrors": [],
      "onPremisesSecurityIdentifier": null,
      "onPremisesSyncEnabled": null,
      "preferredLanguage": null,
      "proxyAddresses": [
        "SMTP:<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="2e181b1a181d194c1b034d1c4d4a031a1b1a1c034c17164a031d4a161b19481a1716194a486e4b584143414c4742475a5700414043474d5c415d41485a004d4143" rel="noreferrer noopener nofollow">[email protected]</a>"
      ],
      "renewedDateTime": "2017-03-08T21:07:26Z",
      "resourceBehaviorOptions": [],
      "resourceProvisioningOptions": [],
      "securityEnabled": true,
      "theme": null,
      "visibility": "Public"
    },
    {
      "id": "a61214d7-4b0c-421e-86dd-966fcf7c9908",
      "deletedDateTime": null,
      "classification": null,
      "createdDateTime": "2017-01-24T19:33:53Z",
      "description": "This is auto generated security for O365 MDM policy",
      "displayName": "Default MDM security group",
      "groupTypes": [],
      "mail": null,
      "mailEnabled": false,
      "mailNickname": "BposMailNickName",
      "membershipRule": null,
      "membershipRuleProcessingState": null,
      "onPremisesLastSyncDateTime": null,
      "onPremisesProvisioningErrors": [],
      "onPremisesSecurityIdentifier": null,
      "onPremisesSyncEnabled": null,
      "preferredLanguage": null,
      "proxyAddresses": [],
      "renewedDateTime": "2017-01-24T19:33:53Z",
      "resourceBehaviorOptions": [],
      "resourceProvisioningOptions": [],
      "securityEnabled": true,
      "theme": null,
      "visibility": null
    },
    {
      "id": "f64a6ae8-b234-4d99-9ddb-6379016e2c66",
      "deletedDateTime": null,
      "classification": null,
      "createdDateTime": "2017-04-25T19:19:12Z",
      "description": "TestUser1 ",
      "displayName": "TestUser1",
      "groupTypes": [],
      "mail": null,
      "mailEnabled": false,
      "mailNickname": "677a30f1-c00b-40b1-a023-887d916ff7f3",
      "membershipRule": null,
      "membershipRuleProcessingState": null,
      "onPremisesLastSyncDateTime": null,
      "onPremisesProvisioningErrors": [],
      "onPremisesSecurityIdentifier": null,
      "onPremisesSyncEnabled": null,
      "preferredLanguage": null,
      "proxyAddresses": [],
      "renewedDateTime": "2017-04-25T19:19:12Z",
      "resourceBehaviorOptions": [],
      "resourceProvisioningOptions": [],
      "securityEnabled": true,
      "theme": null,
      "visibility": null
    },
    {
      "id": "fa41896d-b61b-4c59-9ba3-6594b570ce80",
      "deletedDateTime": null,
      "classification": null,
      "createdDateTime": "2017-01-20T20:07:59Z",
      "description": null,
      "displayName": "Test Users Group",
      "groupTypes": [],
      "mail": null,
      "mailEnabled": false,
      "mailNickname": "00000000-0000-0000-0000-000000000000",
      "membershipRule": null,
      "membershipRuleProcessingState": null,
      "onPremisesLastSyncDateTime": null,
      "onPremisesProvisioningErrors": [],
      "onPremisesSecurityIdentifier": null,
      "onPremisesSyncEnabled": null,
      "preferredLanguage": null,
      "proxyAddresses": [],
      "renewedDateTime": "2017-01-20T20:07:59Z",
      "resourceBehaviorOptions": [],
      "resourceProvisioningOptions": [],
      "securityEnabled": true,
      "theme": null,
      "visibility": null
    }
  ]
}

Answer 1

试试这个网址:https://graph.microsoft.com/beta/deviceAppManagement/managedAppPolicies/

注意:您需要 Intune 实例中的管理员访问权限。获取 token 时，请查看是否有包含以下任一范围的范围详细信息:DeviceManagementApps.Read.All DeviceManagementApps.ReadWrite.All