You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: microsoftgraph/docs-conceptual/tutorial-entitlement-management.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: "Manage access to resources in Microsoft Entra entitlement management usi
3
3
description: "Learn how to manage access to resources in Microsoft Entra entitlement management using Microsoft Graph PowerShell."
4
4
5
5
ms.topic: tutorial
6
-
ms.date: 03/05/2024
6
+
ms.date: 04/23/2025
7
7
ms.author: eunicewaweru
8
8
manager: CelesteDG
9
9
author: msewaweru
@@ -15,7 +15,7 @@ author: msewaweru
15
15
16
16
Managing access to all the resources that employees need, such as groups, applications, and sites, is an important function for organizations. You want to grant employees the right level of access they need to be productive and remove their access when it's no longer needed. [Microsoft Entra entitlement management](/azure/active-directory/governance/entitlement-management-overview) using Microsoft Graph PowerShell enables you to manage this type of access.
17
17
18
-
In this tutorial, you'll create a package of resources for a marketing campaign that internal users can use for self-service requests. Requests don't require approval and users' access expires after 30 days. Here, the marketing campaign resources are just membership in a single group, but it could be a collection of groups, applications, or SharePoint Online sites.
18
+
In this tutorial, you create a package of resources for a marketing campaign that internal users can use for self-service requests. Requests don't require approval and users' access expires after 30 days. Here, the marketing campaign resources are just membership in a single group, but it could be a collection of groups, applications, or SharePoint Online sites.
19
19
20
20
## Prerequisites
21
21
@@ -35,11 +35,11 @@ To successfully complete this tutorial, make sure you have the required prerequi
35
35
36
36
## Step 1: Create a user account and a group
37
37
38
-
In this step, you'll create a group named **Marketing resources** in the directory that is the target resource for entitlement management. You'll also create a user account that is set up as an internal requestor.
38
+
In this step, you create a group named **Marketing resources** in the directory that is the target resource for entitlement management. You also create a user account that is set up as an internal requestor.
39
39
40
40
### Create a user account
41
41
42
-
Create a user account that you'll use later to request access to the resources in the access package.
42
+
Create a user account that you use later to request access to the resources in the access package.
43
43
44
44
When you make these calls, change `contoso.onmicrosoft.com` to the ___domain name of your tenant. You can find tenant information on the Microsoft Entra overview page. Record the value of the returned `Id` property to use later.
45
45
@@ -144,7 +144,7 @@ The request state indicates the outcome of whether the service was able to add t
144
144
145
145
### Get catalog resources
146
146
147
-
In later steps, you'll need the **Id** that was assigned to the group resource in the catalog. This identifier represents the group as a resource in the catalog and is different from the group identifier itself in Microsoft Graph PowerShell. To get the resource, provide the **Id** of the catalog and filter by the display name of the group.
147
+
In later steps, you need the **Id** that was assigned to the group resource in the catalog. This identifier represents the group as a resource in the catalog and is different from the group identifier itself in Microsoft Graph PowerShell. To get the resource, provide the **Id** of the catalog and filter by the display name of the group.
The access package assigns users to the roles of a resource. The typical role of a group used in an access package is the member role. You'll need the member role when you add a resource role to the access package.
173
+
The access package assigns users to the roles of a resource. The typical role of a group used in an access package is the member role. You need the member role when you add a resource role to the access package.
174
174
175
175
In this command, use the **Id** of the catalog and the **Id** of the group resource you recorded in the previous step to get the **OriginId** of the member resource role.
176
176
@@ -188,7 +188,7 @@ If successful, a single record is returned which represents the member role of t
188
188
189
189
### Create the access package
190
190
191
-
At this point, you have a catalog with a group resource, and you know that you'll use the resource role of group member in the access package. The next step is to create the access package. After creating the access package, you can add the resource role to it and create a policy for how users can request access to that resource role. You use the **Id** of the catalog that you recorded earlier to create the access package. Record the **Id** of the access package to use later. In this step, you create a **Marketing Campaign** access package in the General catalog.
191
+
At this point, you have a catalog with a group resource, and you'll use the resource role of group member in the access package. The next step is to create the access package. After creating the access package, you can add the resource role to it and create a policy for how users can request access to that resource role. You use the **Id** of the catalog that you recorded earlier to create the access package. Record the **Id** of the access package to use later. In this step, you create a **Marketing Campaign** access package in the General catalog.
0 commit comments