azure - 应用程序和用户的 AAD AppRoles allowedMemberTypes

Question

根据Add app roles in your application and receive them in the token ，我可以为用户、应用程序或两者创建一个 AppRole。

如果我想定位用户，Manifest 上的属性 allowedMemberTypes 应为 User。对于应用程序，Application，但是两者呢？

两者的allowedMemberTypes是什么？

Answer 1

allowedMemberTypes 是一个数组，因此您可以同时放入“User”和“Application”:

"appRoles": [
  {
    "allowedMemberTypes": [
      "User", "Application"
    ],
    "displayName": "Writer",
    "id": "d1c2ade8-98f8-45fd-aa4a-6d06b947c66f",
    "isEnabled": true,
    "description": "Writers Have the ability to create tasks.",
    "value": "Writer"
  }
],