命名空间:microsoft.graph
重要
Microsoft Graph /beta 版本下的 API 可能会发生更改。 不支持在生产应用程序中使用这些 API。 若要确定 API 是否在 v1.0 中可用,请使用 版本 选择器。
创建新的 externalOriginResourceConnector 对象。
此 API 可用于以下国家级云部署。
| 全局服务 |
美国政府 L4 |
美国政府 L5 (DOD) |
由世纪互联运营的中国 |
| ✅ |
❌ |
❌ |
❌ |
权限
为此 API 选择标记为最低特权的权限。
只有在应用需要它时,才使用更高的特权权限。 有关委派权限和应用程序权限的详细信息,请参阅权限类型。 要了解有关这些权限的详细信息,请参阅 权限参考。
| 权限类型 |
最低特权权限 |
更高特权权限 |
| 委派(工作或学校帐户) |
EntitlementManagement.ReadWrite.All |
不可用。 |
| 委派(个人 Microsoft 帐户) |
不支持。 |
不支持。 |
| 应用程序 |
EntitlementManagement.ReadWrite.All |
不可用。 |
HTTP 请求
POST /identityGovernance/entitlementManagement/externalOriginResourceConnectors
| 名称 |
说明 |
| Authorization |
持有者 {token}。 必填。 详细了解 身份验证和授权。 |
| Content-Type |
application/json. 必需。 |
请求正文
在请求正文中,提供 externalOriginResourceConnector 对象的 JSON 表示形式。
创建 externalOriginResourceConnector 时,可以指定以下属性。
| 属性 |
类型 |
说明 |
| connectionInfo |
connectionInfo |
外部源资源连接器的连接信息。 必填。 |
| connectorType |
connectorType |
连接符的类型。 可能的值包括 sapIag、sapAc、unknownFutureValue。 必需。 |
| description |
String |
外部源资源连接器的说明。 可选。 |
| displayName |
String |
外部源资源连接器的显示名称。 可选。 |
响应
如果成功,此方法在 201 Created 响应正文中返回响应代码和 externalOriginResourceConnector 对象。
示例
请求
以下示例显示了一个请求。
POST https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/externalOriginResourceConnectors
Content-Type: application/json
{
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
"displayName": "SAP Access Control",
"description": "SAP Access Control connector",
"connectorType": "sapAc",
"connectionInfo": {
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
"url": "dev.test",
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
"keyVaultName": "Keyvault",
"secretName": "Test",
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
"resourceGroup": "SAPIAG Group"
}
}
// Code snippets are only available for the latest version. Current version is 5.x
// Dependencies
using Microsoft.Graph.Beta.Models;
var requestBody = new ExternalOriginResourceConnector
{
OdataType = "#microsoft.graph.externalOriginResourceConnector",
DisplayName = "SAP Access Control",
Description = "SAP Access Control connector",
ConnectorType = ConnectorType.SapAc,
ConnectionInfo = new ExternalTokenBasedSapIagConnectionInfo
{
OdataType = "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
Url = "dev.test",
AccessTokenUrl = "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
ClientId = "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
KeyVaultName = "Keyvault",
SecretName = "Test",
SubscriptionId = "5ee98b73-d9df-43a7-8a92-36855054bdee",
ResourceGroup = "SAPIAG Group",
},
};
// To initialize your graphClient, see https://dotnet.territoriali.olinfo.it/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.IdentityGovernance.EntitlementManagement.ExternalOriginResourceConnectors.PostAsync(requestBody);
// Code snippets are only available for the latest major version. Current major version is $v0.*
// Dependencies
import (
"context"
msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
graphmodels "github.com/microsoftgraph/msgraph-beta-sdk-go/models"
//other-imports
)
requestBody := graphmodels.NewExternalOriginResourceConnector()
displayName := "SAP Access Control"
requestBody.SetDisplayName(&displayName)
description := "SAP Access Control connector"
requestBody.SetDescription(&description)
connectorType := graphmodels.SAPAC_CONNECTORTYPE
requestBody.SetConnectorType(&connectorType)
connectionInfo := graphmodels.NewExternalTokenBasedSapIagConnectionInfo()
url := "dev.test"
connectionInfo.SetUrl(&url)
accessTokenUrl := "9e90019f-6256-41fa-a225-5ef9cc1d9bf8"
connectionInfo.SetAccessTokenUrl(&accessTokenUrl)
clientId := "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29"
connectionInfo.SetClientId(&clientId)
keyVaultName := "Keyvault"
connectionInfo.SetKeyVaultName(&keyVaultName)
secretName := "Test"
connectionInfo.SetSecretName(&secretName)
subscriptionId := "5ee98b73-d9df-43a7-8a92-36855054bdee"
connectionInfo.SetSubscriptionId(&subscriptionId)
resourceGroup := "SAPIAG Group"
connectionInfo.SetResourceGroup(&resourceGroup)
requestBody.SetConnectionInfo(connectionInfo)
// To initialize your graphClient, see https://dotnet.territoriali.olinfo.it/en-us/graph/sdks/create-client?from=snippets&tabs=go
externalOriginResourceConnectors, err := graphClient.IdentityGovernance().EntitlementManagement().ExternalOriginResourceConnectors().Post(context.Background(), requestBody, nil)
// Code snippets are only available for the latest version. Current version is 6.x
GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);
ExternalOriginResourceConnector externalOriginResourceConnector = new ExternalOriginResourceConnector();
externalOriginResourceConnector.setOdataType("#microsoft.graph.externalOriginResourceConnector");
externalOriginResourceConnector.setDisplayName("SAP Access Control");
externalOriginResourceConnector.setDescription("SAP Access Control connector");
externalOriginResourceConnector.setConnectorType(ConnectorType.SapAc);
ExternalTokenBasedSapIagConnectionInfo connectionInfo = new ExternalTokenBasedSapIagConnectionInfo();
connectionInfo.setOdataType("microsoft.graph.externalTokenBasedSapIagConnectionInfo");
connectionInfo.setUrl("dev.test");
connectionInfo.setAccessTokenUrl("9e90019f-6256-41fa-a225-5ef9cc1d9bf8");
connectionInfo.setClientId("e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29");
connectionInfo.setKeyVaultName("Keyvault");
connectionInfo.setSecretName("Test");
connectionInfo.setSubscriptionId("5ee98b73-d9df-43a7-8a92-36855054bdee");
connectionInfo.setResourceGroup("SAPIAG Group");
externalOriginResourceConnector.setConnectionInfo(connectionInfo);
ExternalOriginResourceConnector result = graphClient.identityGovernance().entitlementManagement().externalOriginResourceConnectors().post(externalOriginResourceConnector);
const options = {
authProvider,
};
const client = Client.init(options);
const externalOriginResourceConnector = {
'@odata.type': '#microsoft.graph.externalOriginResourceConnector',
displayName: 'SAP Access Control',
description: 'SAP Access Control connector',
connectorType: 'sapAc',
connectionInfo: {
'@odata.type': 'microsoft.graph.externalTokenBasedSapIagConnectionInfo',
url: 'dev.test',
accessTokenUrl: '9e90019f-6256-41fa-a225-5ef9cc1d9bf8',
clientId: 'e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29',
keyVaultName: 'Keyvault',
secretName: 'Test',
subscriptionId: '5ee98b73-d9df-43a7-8a92-36855054bdee',
resourceGroup: 'SAPIAG Group'
}
};
await client.api('/identityGovernance/entitlementManagement/externalOriginResourceConnectors')
.version('beta')
.post(externalOriginResourceConnector);
<?php
use Microsoft\Graph\Beta\GraphServiceClient;
use Microsoft\Graph\Beta\Generated\Models\ExternalOriginResourceConnector;
use Microsoft\Graph\Beta\Generated\Models\ConnectorType;
use Microsoft\Graph\Beta\Generated\Models\ExternalTokenBasedSapIagConnectionInfo;
$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);
$requestBody = new ExternalOriginResourceConnector();
$requestBody->setOdataType('#microsoft.graph.externalOriginResourceConnector');
$requestBody->setDisplayName('SAP Access Control');
$requestBody->setDescription('SAP Access Control connector');
$requestBody->setConnectorType(new ConnectorType('sapAc'));
$connectionInfo = new ExternalTokenBasedSapIagConnectionInfo();
$connectionInfo->setOdataType('microsoft.graph.externalTokenBasedSapIagConnectionInfo');
$connectionInfo->setUrl('dev.test');
$connectionInfo->setAccessTokenUrl('9e90019f-6256-41fa-a225-5ef9cc1d9bf8');
$connectionInfo->setClientId('e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29');
$connectionInfo->setKeyVaultName('Keyvault');
$connectionInfo->setSecretName('Test');
$connectionInfo->setSubscriptionId('5ee98b73-d9df-43a7-8a92-36855054bdee');
$connectionInfo->setResourceGroup('SAPIAG Group');
$requestBody->setConnectionInfo($connectionInfo);
$result = $graphServiceClient->identityGovernance()->entitlementManagement()->externalOriginResourceConnectors()->post($requestBody)->wait();
Import-Module Microsoft.Graph.Beta.Identity.Governance
$params = @{
"@odata.type" = "#microsoft.graph.externalOriginResourceConnector"
displayName = "SAP Access Control"
description = "SAP Access Control connector"
connectorType = "sapAc"
connectionInfo = @{
"@odata.type" = "microsoft.graph.externalTokenBasedSapIagConnectionInfo"
url = "dev.test"
accessTokenUrl = "9e90019f-6256-41fa-a225-5ef9cc1d9bf8"
clientId = "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29"
keyVaultName = "Keyvault"
secretName = "Test"
subscriptionId = "5ee98b73-d9df-43a7-8a92-36855054bdee"
resourceGroup = "SAPIAG Group"
}
}
New-MgBetaEntitlementManagementExternalOriginResourceConnector -BodyParameter $params
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
from msgraph_beta.generated.models.external_origin_resource_connector import ExternalOriginResourceConnector
from msgraph_beta.generated.models.connector_type import ConnectorType
from msgraph_beta.generated.models.external_token_based_sap_iag_connection_info import ExternalTokenBasedSapIagConnectionInfo
# To initialize your graph_client, see https://dotnet.territoriali.olinfo.it/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = ExternalOriginResourceConnector(
odata_type = "#microsoft.graph.externalOriginResourceConnector",
display_name = "SAP Access Control",
description = "SAP Access Control connector",
connector_type = ConnectorType.SapAc,
connection_info = ExternalTokenBasedSapIagConnectionInfo(
odata_type = "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
url = "dev.test",
access_token_url = "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
client_id = "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
key_vault_name = "Keyvault",
secret_name = "Test",
subscription_id = "5ee98b73-d9df-43a7-8a92-36855054bdee",
resource_group = "SAPIAG Group",
),
)
result = await graph_client.identity_governance.entitlement_management.external_origin_resource_connectors.post(request_body)
响应
以下示例显示了相应的响应。
注意:为了提高可读性,可能缩短了此处显示的响应对象。
HTTP/1.1 201 Created
Content-Type: application/json
{
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
"id": "375db7fb-280f-5d24-1abd-c63e0311c131",
"displayName": "SAP Access Control",
"description": "SAP Access Control connector",
"connectorType": "sapAc",
"connectionInfo": {
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
"url": "dev.test",
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
"keyVaultName": "Keyvault",
"secretName": "Test",
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
"resourceGroup": "SAPIAG Group"
},
"createdBy": "admin@contoso.com",
"createdDateTime": "2026-02-23T10:15:30Z",
"modifiedBy": "admin@contoso.com",
"modifiedDateTime": "2026-02-23T10:15:30Z"
}