命名空间:microsoft.graph
重要
Microsoft Graph /beta 版本下的 API 可能会发生更改。 不支持在生产应用程序中使用这些 API。 若要确定 API 是否在 v1.0 中可用,请使用 版本 选择器。
更新 externalOriginResourceConnector 对象的属性。
此 API 可用于以下国家级云部署。
| 全局服务 |
美国政府 L4 |
美国政府 L5 (DOD) |
由世纪互联运营的中国 |
| ✅ |
❌ |
❌ |
❌ |
权限
为此 API 选择标记为最低特权的权限。
只有在应用需要它时,才使用更高的特权权限。 有关委派权限和应用程序权限的详细信息,请参阅权限类型。 要了解有关这些权限的详细信息,请参阅 权限参考。
| 权限类型 |
最低特权权限 |
更高特权权限 |
| 委派(工作或学校帐户) |
EntitlementManagement.ReadWrite.All |
不可用。 |
| 委派(个人 Microsoft 帐户) |
不支持。 |
不支持。 |
| 应用程序 |
EntitlementManagement.ReadWrite.All |
不可用。 |
提示
对于使用工作或学校帐户的委派访问,必须通过以下选项之一为已登录用户分配具有支持的角色权限的管理员角色:
在仅限应用的情况下,可为调用应用分配上述受支持的角色之一,而不是 EntitlementManagement.ReadWrite.All 应用程序权限。
标识治理管理员角色的特权低于EntitlementManagement.ReadWrite.All应用程序权限。
有关详细信息,请参阅 权利管理中的委派和角色 以及如何 在权利管理中将访问管理委托给访问包管理员。
HTTP 请求
PATCH /identityGovernance/entitlementManagement/externalOriginResourceConnectors/{externalOriginResourceConnectorId}
| 名称 |
说明 |
| Authorization |
持有者 {token}。 必填。 详细了解 身份验证和授权。 |
| Content-Type |
application/json. 必需。 |
请求正文
在请求正文中, 仅 提供要更新的属性的值。 请求正文中未包含的现有属性会保留其以前的值,或者根据对其他属性值的更改重新计算。
下表指定可更新的属性。
| 属性 |
类型 |
说明 |
| displayName |
String |
连接器的显示名称。 可选。 |
| description |
String |
连接器的说明。 可选。 |
| connectorType |
connectorType |
连接符的类型。 连接器类型可以是 SAP Cloud Identity Access Governance (sapIag) 或 SAP Augmented 访问控制 (sapAc) 。 可能的值包括 sapIag、sapAc、unknownFutureValue。 可选。 |
| connectionInfo |
connectionInfo |
用于与外部资源系统通信的连接信息。 可选。 |
响应
如果成功,此方法在响应正文中返回响应 200 OK 代码和更新的 externalOriginResourceConnector 对象。
示例
请求
以下示例显示了一个请求。
PATCH https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/externalOriginResourceConnectors/e363ebb8-6faa-4980-ac5b-eefc196e1cd4
Content-Type: application/json
{
"id": "d743fe46-80f8-41b1-a2ee-7796e024edb9",
"connectorType": "sapIag",
"displayName": "SAP IAG 5.0",
"description": "SAP IAG 5.0.0.0.0",
"connectionInfo": {
"@odata.type": "Microsoft.IGAELM.EC.FrontEnd.ExternalModel.externalTokenBasedSapIagConnectionInfo",
"url": "https://IAGINTGORG-iag-intg-space-java-rest-arqapi.cfps.sap.hana.ondemand.com",
"keyVaultName": "sap-key-vault",
"subscriptionId": "caa5v042-9c76-44de-9e84-f3e3071a7b4e",
"resourceGroup": "test-rg",
"accessTokenUrl": "https://entra-intg-l4nds6yn.authentication.sap.hana.ondemand.com/oauth/token",
"clientId": "sb-8d896b-72b5-46ce-9273-471874a09137!b133623|iagapi-iag-intg-space!b11378",
"secretName": "clienecret"
}
}
// Code snippets are only available for the latest version. Current version is 5.x
// Dependencies
using Microsoft.Graph.Beta.Models;
var requestBody = new ExternalOriginResourceConnector
{
Id = "d743fe46-80f8-41b1-a2ee-7796e024edb9",
ConnectorType = ConnectorType.SapIag,
DisplayName = "SAP IAG 5.0",
Description = "SAP IAG 5.0.0.0.0",
ConnectionInfo = new ConnectionInfo
{
OdataType = "Microsoft.IGAELM.EC.FrontEnd.ExternalModel.externalTokenBasedSapIagConnectionInfo",
Url = "https://IAGINTGORG-iag-intg-space-java-rest-arqapi.cfps.sap.hana.ondemand.com",
AdditionalData = new Dictionary<string, object>
{
{
"keyVaultName" , "sap-key-vault"
},
{
"subscriptionId" , "caa5v042-9c76-44de-9e84-f3e3071a7b4e"
},
{
"resourceGroup" , "test-rg"
},
{
"accessTokenUrl" , "https://entra-intg-l4nds6yn.authentication.sap.hana.ondemand.com/oauth/token"
},
{
"clientId" , "sb-8d896b-72b5-46ce-9273-471874a09137!b133623|iagapi-iag-intg-space!b11378"
},
{
"secretName" , "clienecret"
},
},
},
};
// To initialize your graphClient, see https://dotnet.territoriali.olinfo.it/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.IdentityGovernance.EntitlementManagement.ExternalOriginResourceConnectors["{externalOriginResourceConnector-id}"].PatchAsync(requestBody);
// Code snippets are only available for the latest major version. Current major version is $v0.*
// Dependencies
import (
"context"
msgraphsdk "github.com/microsoftgraph/msgraph-beta-sdk-go"
graphmodels "github.com/microsoftgraph/msgraph-beta-sdk-go/models"
//other-imports
)
requestBody := graphmodels.NewExternalOriginResourceConnector()
id := "d743fe46-80f8-41b1-a2ee-7796e024edb9"
requestBody.SetId(&id)
connectorType := graphmodels.SAPIAG_CONNECTORTYPE
requestBody.SetConnectorType(&connectorType)
displayName := "SAP IAG 5.0"
requestBody.SetDisplayName(&displayName)
description := "SAP IAG 5.0.0.0.0"
requestBody.SetDescription(&description)
connectionInfo := graphmodels.NewConnectionInfo()
url := "https://IAGINTGORG-iag-intg-space-java-rest-arqapi.cfps.sap.hana.ondemand.com"
connectionInfo.SetUrl(&url)
additionalData := map[string]interface{}{
"keyVaultName" : "sap-key-vault",
"subscriptionId" : "caa5v042-9c76-44de-9e84-f3e3071a7b4e",
"resourceGroup" : "test-rg",
"accessTokenUrl" : "https://entra-intg-l4nds6yn.authentication.sap.hana.ondemand.com/oauth/token",
"clientId" : "sb-8d896b-72b5-46ce-9273-471874a09137!b133623|iagapi-iag-intg-space!b11378",
"secretName" : "clienecret",
}
connectionInfo.SetAdditionalData(additionalData)
requestBody.SetConnectionInfo(connectionInfo)
// To initialize your graphClient, see https://dotnet.territoriali.olinfo.it/en-us/graph/sdks/create-client?from=snippets&tabs=go
externalOriginResourceConnectors, err := graphClient.IdentityGovernance().EntitlementManagement().ExternalOriginResourceConnectors().ByExternalOriginResourceConnectorId("externalOriginResourceConnector-id").Patch(context.Background(), requestBody, nil)
// Code snippets are only available for the latest version. Current version is 6.x
GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);
ExternalOriginResourceConnector externalOriginResourceConnector = new ExternalOriginResourceConnector();
externalOriginResourceConnector.setId("d743fe46-80f8-41b1-a2ee-7796e024edb9");
externalOriginResourceConnector.setConnectorType(ConnectorType.SapIag);
externalOriginResourceConnector.setDisplayName("SAP IAG 5.0");
externalOriginResourceConnector.setDescription("SAP IAG 5.0.0.0.0");
ConnectionInfo connectionInfo = new ConnectionInfo();
connectionInfo.setOdataType("Microsoft.IGAELM.EC.FrontEnd.ExternalModel.externalTokenBasedSapIagConnectionInfo");
connectionInfo.setUrl("https://IAGINTGORG-iag-intg-space-java-rest-arqapi.cfps.sap.hana.ondemand.com");
HashMap<String, Object> additionalData = new HashMap<String, Object>();
additionalData.put("keyVaultName", "sap-key-vault");
additionalData.put("subscriptionId", "caa5v042-9c76-44de-9e84-f3e3071a7b4e");
additionalData.put("resourceGroup", "test-rg");
additionalData.put("accessTokenUrl", "https://entra-intg-l4nds6yn.authentication.sap.hana.ondemand.com/oauth/token");
additionalData.put("clientId", "sb-8d896b-72b5-46ce-9273-471874a09137!b133623|iagapi-iag-intg-space!b11378");
additionalData.put("secretName", "clienecret");
connectionInfo.setAdditionalData(additionalData);
externalOriginResourceConnector.setConnectionInfo(connectionInfo);
ExternalOriginResourceConnector result = graphClient.identityGovernance().entitlementManagement().externalOriginResourceConnectors().byExternalOriginResourceConnectorId("{externalOriginResourceConnector-id}").patch(externalOriginResourceConnector);
const options = {
authProvider,
};
const client = Client.init(options);
const externalOriginResourceConnector = {
id: 'd743fe46-80f8-41b1-a2ee-7796e024edb9',
connectorType: 'sapIag',
displayName: 'SAP IAG 5.0',
description: 'SAP IAG 5.0.0.0.0',
connectionInfo: {
'@odata.type': 'Microsoft.IGAELM.EC.FrontEnd.ExternalModel.externalTokenBasedSapIagConnectionInfo',
url: 'https://IAGINTGORG-iag-intg-space-java-rest-arqapi.cfps.sap.hana.ondemand.com',
keyVaultName: 'sap-key-vault',
subscriptionId: 'caa5v042-9c76-44de-9e84-f3e3071a7b4e',
resourceGroup: 'test-rg',
accessTokenUrl: 'https://entra-intg-l4nds6yn.authentication.sap.hana.ondemand.com/oauth/token',
clientId: 'sb-8d896b-72b5-46ce-9273-471874a09137!b133623|iagapi-iag-intg-space!b11378',
secretName: 'clienecret'
}
};
await client.api('/identityGovernance/entitlementManagement/externalOriginResourceConnectors/e363ebb8-6faa-4980-ac5b-eefc196e1cd4')
.version('beta')
.update(externalOriginResourceConnector);
<?php
use Microsoft\Graph\Beta\GraphServiceClient;
use Microsoft\Graph\Beta\Generated\Models\ExternalOriginResourceConnector;
use Microsoft\Graph\Beta\Generated\Models\ConnectorType;
use Microsoft\Graph\Beta\Generated\Models\ConnectionInfo;
$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);
$requestBody = new ExternalOriginResourceConnector();
$requestBody->setId('d743fe46-80f8-41b1-a2ee-7796e024edb9');
$requestBody->setConnectorType(new ConnectorType('sapIag'));
$requestBody->setDisplayName('SAP IAG 5.0');
$requestBody->setDescription('SAP IAG 5.0.0.0.0');
$connectionInfo = new ConnectionInfo();
$connectionInfo->setOdataType('Microsoft.IGAELM.EC.FrontEnd.ExternalModel.externalTokenBasedSapIagConnectionInfo');
$connectionInfo->setUrl('https://IAGINTGORG-iag-intg-space-java-rest-arqapi.cfps.sap.hana.ondemand.com');
$additionalData = [
'keyVaultName' => 'sap-key-vault',
'subscriptionId' => 'caa5v042-9c76-44de-9e84-f3e3071a7b4e',
'resourceGroup' => 'test-rg',
'accessTokenUrl' => 'https://entra-intg-l4nds6yn.authentication.sap.hana.ondemand.com/oauth/token',
'clientId' => 'sb-8d896b-72b5-46ce-9273-471874a09137!b133623|iagapi-iag-intg-space!b11378',
'secretName' => 'clienecret',
];
$connectionInfo->setAdditionalData($additionalData);
$requestBody->setConnectionInfo($connectionInfo);
$result = $graphServiceClient->identityGovernance()->entitlementManagement()->externalOriginResourceConnectors()->byExternalOriginResourceConnectorId('externalOriginResourceConnector-id')->patch($requestBody)->wait();
Import-Module Microsoft.Graph.Beta.Identity.Governance
$params = @{
id = "d743fe46-80f8-41b1-a2ee-7796e024edb9"
connectorType = "sapIag"
displayName = "SAP IAG 5.0"
description = "SAP IAG 5.0.0.0.0"
connectionInfo = @{
"@odata.type" = "Microsoft.IGAELM.EC.FrontEnd.ExternalModel.externalTokenBasedSapIagConnectionInfo"
url = "https://IAGINTGORG-iag-intg-space-java-rest-arqapi.cfps.sap.hana.ondemand.com"
keyVaultName = "sap-key-vault"
subscriptionId = "caa5v042-9c76-44de-9e84-f3e3071a7b4e"
resourceGroup = "test-rg"
accessTokenUrl = "https://entra-intg-l4nds6yn.authentication.sap.hana.ondemand.com/oauth/token"
clientId = "sb-8d896b-72b5-46ce-9273-471874a09137!b133623|iagapi-iag-intg-space!b11378"
secretName = "clienecret"
}
}
Update-MgBetaEntitlementManagementExternalOriginResourceConnector -ExternalOriginResourceConnectorId $externalOriginResourceConnectorId -BodyParameter $params
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
from msgraph_beta.generated.models.external_origin_resource_connector import ExternalOriginResourceConnector
from msgraph_beta.generated.models.connector_type import ConnectorType
from msgraph_beta.generated.models.connection_info import ConnectionInfo
# To initialize your graph_client, see https://dotnet.territoriali.olinfo.it/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = ExternalOriginResourceConnector(
id = "d743fe46-80f8-41b1-a2ee-7796e024edb9",
connector_type = ConnectorType.SapIag,
display_name = "SAP IAG 5.0",
description = "SAP IAG 5.0.0.0.0",
connection_info = ConnectionInfo(
odata_type = "Microsoft.IGAELM.EC.FrontEnd.ExternalModel.externalTokenBasedSapIagConnectionInfo",
url = "https://IAGINTGORG-iag-intg-space-java-rest-arqapi.cfps.sap.hana.ondemand.com",
additional_data = {
"key_vault_name" : "sap-key-vault",
"subscription_id" : "caa5v042-9c76-44de-9e84-f3e3071a7b4e",
"resource_group" : "test-rg",
"access_token_url" : "https://entra-intg-l4nds6yn.authentication.sap.hana.ondemand.com/oauth/token",
"client_id" : "sb-8d896b-72b5-46ce-9273-471874a09137!b133623|iagapi-iag-intg-space!b11378",
"secret_name" : "clienecret",
}
),
)
result = await graph_client.identity_governance.entitlement_management.external_origin_resource_connectors.by_external_origin_resource_connector_id('externalOriginResourceConnector-id').patch(request_body)
响应
以下示例显示了相应的响应。
注意:为了提高可读性,可能缩短了此处显示的响应对象。
HTTP/1.1 200 OK
Content-Type: application/json
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#identityGovernance/entitlementManagement/externalOriginResourceConnector/$entity",
"@odata.type": "#microsoft.graph.externalOriginResourceConnector",
"id": "e363ebb8-6faa-4980-ac5b-eefc196e1cd",
"displayName": "SAP Identity Access Governance Connector Test",
"description": "SAP Identity Access Governance Connector test",
"connectorType": "sapIag",
"connectionInfo": {
"@odata.type": "microsoft.graph.externalTokenBasedSapIagConnectionInfo",
"url": "dev.test",
"accessTokenUrl": "9e90019f-6256-41fa-a225-5ef9cc1d9bf8",
"clientId": "e9ad8b1d-959c-4e86-8ba2-2cbf4d14bc29",
"keyVaultName": "Keyvault",
"secretName": "Test",
"subscriptionId": "5ee98b73-d9df-43a7-8a92-36855054bdee",
"resourceGroup": "SAPIAG Group"
},
"createdBy": "kayat@contoso.com",
"createdDateTime": "2025-10-29T09:50:23Z",
"modifiedBy": "kayat@contoso.com",
"modifiedDateTime": "2025-12-04T01:10:28Z"
}