Leveraging Intelligent Recommendations for Operational Transformation. AMS Partners click HERE | EMEA/APJ Partners click HERE |
11/23/2023 08:17 AM
Hi Team,
Can you help in getting the Microsoft graph API for Azure PIM eligible member to remove the members from the entitlements.
We have a requirement to remove normal accounts as well as the eligible members from the Azure AD groups.
Kindly suggest.
Regards,
Ekata
11/23/2023 03:12 PM
Refer https://learn.microsoft.com/en-us/graph/api/group-delete-members?view=graph-rest-1.0&tabs=http
11/23/2023 11:34 PM
Hi Rushikesh,
Thanks for the response but this API we already tried but getting error while completing the task.
Error message- {"AADGroup":{"headers":null,"message":{"error":{"code":"Request_ResourceNotFound","message":"Resource '00d9a4d0-5128-45ff-af88-a8c71f3680c2' does not exist or one of its queried reference-property objects are not present.","innerError":{"date":"2023-11-23T12:21:19","request-id":"5272b563-2170-4fa4-8cbf-8d598e7681df","client-request-id":"5272b563-2170-4fa4-8cbf-8d598e7681df"}}},"statusCode":404,"description":null,"status":"Failed"}}
11/24/2023 06:11 AM
Below is the API we use:
{
"call": [
{
"name": "AADGroup",
"connection": "userAuth",
"url": "https://graph.microsoft.com/v1.0/groups/${entitlementValue.entitlementID}/members/${account.accountI...\$ref",
"httpMethod": "DELETE",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201,
204,
205
]
}
}
]
}
and it is working for Normal accounts.
11/26/2023 09:36 PM
11/27/2023 01:38 AM
1. For normal accounts yes but for the privileged members no.
2. It has the required privileges. The error is regarding the resourceID not found. For permissions issue it should throw error as authorization error. right?
11/27/2023 01:42 AM
The prob I guess here is the API only which either I am unable to map correctly or the API itself is not the correct one.