2

I have assigned SpaceAdministrator Role level for the Azure Ad UserID using the postman call for the API end point https://xxxxxx.eastus.azuresmartspaces.net/management/api/v1.0/roleassignments which was successfull.

Postman call:

enter image description here

Later when we tried validating the roles permissions using the API endpoint https://xxxx.eastus.azuresmartspaces.net/management/api/v1.0/roleassignments/check?path=/&userId=xxxxx-cab9-4ac3-b4ec-60bc4236fc47&accessType=Read&resourceType=Space it always return false and we are unable to validate the role permissions

Pavankumar
  • 33
  • 4
  • When testing from here you also see false as result? https://docs.westcentralus.azuresmartspaces.net/management/swagger/ui/index#/RoleAssignments/RoleAssignments_Check – asergaz Jan 24 '19 at 11:48
  • Yes, i am seeing false that is what is my i am not sure what we are missing which is causing. Are you able to validate the permissions? If yes can you share the details how are implementing. Also is there possibility to implement custom roles. – Pavankumar Jan 25 '19 at 10:34

1 Answers1

1

You also need to specify the tenantId in the check access query.

For example:

https://xxxx.eastus.azuresmartspaces.net/management/api/v1.0/roleassignments/check?path=/&userId=xxxxx-cab9-4ac3-b4ec-60bc4236fc47&accessType=Read&resourceType=Space&tenantId={tenantIdGuid}

Rigel1121
  • 2,022
  • 1
  • 17
  • 24
Eric Pogash
  • 11
  • 1