AAD群组的配额可以通过Microsoft Graph API进行管理。以下是使用Microsoft Graph API获取和更新AAD群组配额的代码示例:
获取AAD群组配额示例(C#):
using Microsoft.Graph;
using Microsoft.Identity.Client;
using System;
class Program
{
static async Task Main(string[] args)
{
// 配置应用程序身份验证
var clientId = "YourClientId";
var clientSecret = "YourClientSecret";
var tenantId = "YourTenantId";
var scopes = new string[] { "https://graph.microsoft.com/.default" };
var app = ConfidentialClientApplicationBuilder
.Create(clientId)
.WithClientSecret(clientSecret)
.WithAuthority($"https://login.microsoftonline.com/{tenantId}")
.Build();
// 获取访问令牌
var authResult = await app.AcquireTokenForClient(scopes)
.ExecuteAsync();
// 创建GraphServiceClient实例
var graphClient = new GraphServiceClient(new DelegateAuthenticationProvider(requestMessage =>
{
requestMessage.Headers.Authorization = new AuthenticationHeaderValue("Bearer", authResult.AccessToken);
return Task.CompletedTask;
}));
// 获取AAD群组配额
var groupQuota = await graphClient.Directory.GetGroupLifecyclePolicies().Request().GetAsync();
Console.WriteLine($"AAD群组配额:{groupQuota.Value[0].GroupCreationPolicySetting.AllowedGroupTypes}");
Console.ReadLine();
}
}
更新AAD群组配额示例(C#):
using Microsoft.Graph;
using Microsoft.Identity.Client;
using System;
class Program
{
static async Task Main(string[] args)
{
// 配置应用程序身份验证
var clientId = "YourClientId";
var clientSecret = "YourClientSecret";
var tenantId = "YourTenantId";
var scopes = new string[] { "https://graph.microsoft.com/.default" };
var app = ConfidentialClientApplicationBuilder
.Create(clientId)
.WithClientSecret(clientSecret)
.WithAuthority($"https://login.microsoftonline.com/{tenantId}")
.Build();
// 获取访问令牌
var authResult = await app.AcquireTokenForClient(scopes)
.ExecuteAsync();
// 创建GraphServiceClient实例
var graphClient = new GraphServiceClient(new DelegateAuthenticationProvider(requestMessage =>
{
requestMessage.Headers.Authorization = new AuthenticationHeaderValue("Bearer", authResult.AccessToken);
return Task.CompletedTask;
}));
// 更新AAD群组配额
var groupQuota = await graphClient.Directory.GetGroupLifecyclePolicies().Request().GetAsync();
groupQuota.Value[0].GroupCreationPolicySetting.AllowedGroupTypes = new string[] { "Unified" };
await graphClient.Directory.GetGroupLifecyclePolicies().Request().UpdateAsync(groupQuota.Value[0]);
Console.WriteLine("AAD群组配额已更新");
Console.ReadLine();
}
}
请注意,在使用这些代码示例之前,您需要先注册应用程序,并获得相应的客户端ID、客户端密钥和租户ID。