ms-identity-javascript-nodejs-tutorial/4-AccessControl/2-security-groups/AppCreationScripts/sample.json at main · Azure-Samples/ms-identity-javascript-nodejs-tutorial · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
{
    "Sample": {
        "Title": "Node.js & Express web app using Security Groups to implement Role-Based Access Control",
        "Level": 300,
        "Client": "Node.js & Express web app",
        "RepositoryUrl": "ms-identity-javascript-nodejs-tutorial",
        "Endpoint": "AAD v2.0"
    },
    "AADApps": [
        {
            "Id": "client",
            "Name": "msal-node-webapp",
            "Kind": "WebApp",
            "Audience": "AzureADMyOrg",
            "HomePage": "http://localhost:4000",
            "ReplyUrls": "http://localhost:4000/redirect",
            "GroupMembershipClaims": "SecurityGroup",
            "PasswordCredentials": "Auto",
            "Certificate": "Auto",
            "Sdk": "MsalNode",
            "SampleSubPath": "4-AccessControl\\2-security-groups\\App",
            "RequiredResourcesAccess": [
                {
                    "Resource": "Microsoft Graph",
                    "DelegatedPermissions": [
                        "User.Read",
                        "GroupMember.Read.All"
                    ]
                }
            ],
            "SecurityGroups": [
                {
                    "Name": "GroupAdmin",
                    "Description": "Admin Security Group"
                },
                {
                    "Name": "GroupMember",
                    "Description": "User Security Group"
                }
            ],
            "OptionalClaims": {
                "AccessTokenClaims": ["acct"]
            },
            "ManualSteps": [
                {
                    "Comment": "To support overage scenario, remember to provide admin consent for GroupMember.Read.All permission in the portal."
                },
                {
                    "Comment": "This script has created a group named 'GroupAdmin' for you. On Azure portal, navigate to Azure AD > Groups blade and assign some users to it."
                },
                {
                    "Comment": "This script has created a group named 'GroupMember' for you. On Azure portal, navigate to Azure AD > Groups blade and assign some users to it."
                }
            ]
        }
    ],
    "CodeConfiguration": [
        {
            "App": "client",
            "SettingKind": "Replace",
            "SettingFile": "\\..\\App\\authConfig.js",
            "Mappings": [
                {
                    "key": "Enter_the_Application_Id_Here",
                    "value": ".AppId"
                },
                {
                    "key": "Enter_the_Tenant_Info_Here",
                    "value": "$tenantId"
                },
                {
                    "key": "Enter_the_Client_Secret_Here",
                    "value": ".AppKey"
                }
            ]
        },
        {
            "App": "client",
            "SettingKind": "Replace",
            "SettingFile": "\\..\\App\\app.js",
            "Mappings": [
                {
                    "key": "Enter_the_ObjectId_of_GroupAdmin",
                    "value": "$GroupAdmin.Id"
                },
                {
                    "key": "Enter_the_ObjectId_of_GroupMember",
                    "value": "$GroupMember.Id"
                }
            ]
        }
    ]
}