...
Create a custom scope
Normally, access tokens issued by Azure AD are issued for Microsoft Graph. However, ModelOp Center requires that the access tokens requested with the following apps be issued for the apps themselves and not Microsoft Graph: gateway-service
, internal-client
, external-integration-client
, and go-cli
.
...
Open the app registration
Open “API permissions” tab
Click “Add a permission”
Click “APIs my organization uses”
Search for the app by name. For example, “gateway-service”. Select the app
Click “Delegated permissions”
Select
custom_scope
Click “Grant admin consent for _”
...
Create an app role
To create an app role for a given app, follow these steps:
...