{"id":514123,"date":"2024-02-21T12:33:32","date_gmt":"2024-02-21T11:33:32","guid":{"rendered":"https:\/\/www.devoteam.com\/expert-view\/automate-entitlement-management-using-microsoft-graph\/"},"modified":"2024-02-21T12:33:32","modified_gmt":"2024-02-21T11:33:32","slug":"automate-entitlement-management-using-microsoft-graph","status":"publish","type":"expert-view","link":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/","title":{"rendered":"Automate Entitlement Management using Microsoft Graph"},"content":{"rendered":"\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS.png\" alt=\"\" class=\"wp-image-5001\" style=\"width:1031px;height:auto\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember139\">In a previous <a href=\"https:\/\/www.linkedin.com\/pulse\/manage-azure-ad-roles-pim-entitlement-management-khaled-laghrour%3FtrackingId=TJ6gFrWeTnWLdoiGa3whDQ%253D%253D\/?trackingId=TJ6gFrWeTnWLdoiGa3whDQ%3D%3D\">Linkedin article<\/a>, Khaled Laghrour has shared with you how you can combine Privileged Identity Management and Entitlement Management to manage Microsoft Entra administrative roles. But when you start using Entitlement Management, you will notice that you have to configure different components and settings, and sometimes you do repetitive tasks such as adding a user to an access package or a resource to an existing catalog and this is why admins often prefer not using Entitlement Management for them, it adds complexity to their daily work.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember140\">So, in this article, Khaled Laghrour will share with you how we can automate entitlement management using Azure AD entitlement management API and integration with businesses applications or your IAM solution.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ember141\"><strong>Why do you need to automate Entitlement Management?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember142\">Manual actions lead to errors, such as adding the wrong user to an access package assignments or granting an unauthorized user access to a Microsoft 365 or group or business app. This why we recommend using automation, which can save you time and effort and avoiding management errors leading to data loss or security breach. Moreover, you will make the most of the solution because the implementation and management will be easier.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ember143\"><strong>Understanding Licensing Requirements for Microsoft Entra Identity Governance<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember144\">Before delving into the deployment of PIM with Identity Governance features, it&#8217;s essential to understand the licensing requirements for Identity Governance. For more detailed information, refer to the provided <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/governance\/licensing-fundamentals#features-by-license\">link<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ember145\"><strong>What can you do with Azure AD entitlement management API?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember146\">After testing the Azure AD entitlement management API, we can say that you have all that you need to automate your entitlement management, here is a list of available resources types :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>accessPackage:<\/strong> Defines the collections of resource roles and the policies for how one or more users may obtain access to those resources.<\/li>\n\n\n\n<li><strong>accessPackageAssignmentPolicy:<\/strong> Specifies the policy by which subjects may request or be assigned an access package via an access package assignment.<\/li>\n\n\n\n<li>a<strong>ccessPackageAssignmentRequest: <\/strong>Created by a user who wishes to obtain an access package assignment.<\/li>\n\n\n\n<li><strong>accessPackageAssignment:<\/strong> An assignment of an access package to a particular subject, for a period of time.<\/li>\n\n\n\n<li><strong>accessPackageCatalog:<\/strong> A container for access packages.<\/li>\n\n\n\n<li><strong>accessPackageResource: <\/strong>A reference to a resource associated with an access package catalog.<\/li>\n\n\n\n<li><strong>accessPackageResourceRequest:<\/strong> A request to add a resource to an access package catalog.<\/li>\n\n\n\n<li><strong>accessPackageResourceEnvironment:<\/strong> A reference to the geolocation of the resource. Applicable to Multi-Geo SharePoint Online sites.<\/li>\n\n\n\n<li><strong>connectedOrganization:<\/strong> A connected organization for external users who can request access.<\/li>\n\n\n\n<li><strong>entitlementManagementSettings: <\/strong>Tenant-wide settings for Azure AD entitlement management.<\/li>\n\n\n\n<li><strong>approval: <\/strong>represents the decisions associated with an access package request.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember148\">In addition to the list above, you can manage access reviews, lifecycle workflows, PIM, and terms of use.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember149\">Source of the list above : <a href=\"https:\/\/learn.microsoft.com\/en-us\/graph\/api\/resources\/entitlementmanagement-overview?view=graph-rest-1.0\">Working with the Azure AD entitlement management API<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ember150\"><strong>What options do you have to design your automation solution?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember151\">Depending on your environment (cloud-based or Hybrid) and requirements, you can design your Entitlement Management automation solution. You must look for a solution that allows customization to adapt to your specific workflows and processes and can seamlessly integrate with existing systems, applications, and third-party tools. Additionally, make sure the solution can scale as your organization grows and automation needs change.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"ember152\">Khaled is currently in the process of crafting a sample design, and once it is completed, we will share it with you. He believe it will provide a tangible representation of the concepts and ideas under consideration. Upon completion, he look forward to presenting this sample design for your review and feedback.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Redaction by <strong>Khaled Laghrour<\/strong> &#8211; M Cloud &#8211; Cloud Services | Technology Manager &#8211; Modern Work<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-cover alignfull has-parallax\" style=\"margin-top:0;margin-bottom:0;padding-top:var(--wp--preset--spacing--xxx-large);padding-right:var(--wp--preset--spacing--large);padding-bottom:var(--wp--preset--spacing--xxx-large);padding-left:var(--wp--preset--spacing--large)\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-main-background-color has-background-dim-70 has-background-dim\"><\/span><div class=\"wp-block-cover__image-background wp-image-7229 has-parallax\" style=\"background-position:50% 50%;background-image:url(https:\/\/devoteam.info\/wp-content\/uploads\/2024\/05\/Surfer-001-copy.jpg)\"><\/div><div class=\"wp-block-cover__inner-container has-global-padding is-layout-constrained wp-container-core-cover-is-layout-ea3f966a wp-block-cover-is-layout-constrained\">\n<div class=\"wp-block-columns alignwide is-layout-flex wp-container-core-columns-is-layout-d064aeaa wp-block-columns-is-layout-flex\" style=\"border-style:none;border-width:0px\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:30%\">\n<h2 class=\"wp-block-heading\" id=\"h-your-success-starts-here\"><strong>Your Success Starts Here<\/strong><\/h2>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"border-left-color:var(--wp--preset--color--base);border-left-style:solid;border-left-width:2px;padding-right:var(--wp--preset--spacing--small);padding-left:var(--wp--preset--spacing--x-large);flex-basis:70%\">\n<div class=\"wp-block-group is-style-default has-global-padding is-layout-constrained wp-container-core-group-is-layout-9819b1f7 wp-block-group-is-layout-constrained\" style=\"padding-right:var(--wp--preset--spacing--x-small)\">\n<p class=\"has-medium-font-size wp-block-paragraph\">Partner with Devoteam to leverage award-winning tech expertise, agile execution, and a culture of continuous learning.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-fill\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/devoteam.info\/be\/get-in-touch\/\">Get in touch<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>In a previous Linkedin article, Khaled Laghrour has shared with you how you can combine Privileged Identity Management and Entitlement Management to manage Microsoft Entra administrative roles. But when you start using Entitlement Management, you will notice that you have to configure different components and settings, and sometimes you do repetitive tasks such as adding [&hellip;]<\/p>\n","protected":false},"featured_media":154964,"template":"","categories":[1059,1060,1063],"tags":[2628,1728,1792,1720],"industry":[],"class_list":["post-514123","expert-view","type-expert-view","status-publish","has-post-thumbnail","hentry","category-cloud-managed-services","category-cloud-native-architecture","category-microsoft","tag-cloud-managed-services-be","tag-cloud-native-architecture-be","tag-luxembourg-be","tag-microsoft-be"],"acf":[],"cards":"\n\t<div class=\"single-post-card\">\n\n\t\t<figure class=\"wp-block-post-featured-image\"><a href=\"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/\" target=\"_self\" ><img width=\"1081\" height=\"1081\" src=\"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Automate Entitlement Management using Microsoft Graph\" style=\"aspect-ratio:4\/3;width:100%;object-fit:cover;\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square.png 1081w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square-300x300.png 300w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square-1024x1024.png 1024w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square-150x150.png 150w, https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square-768x768.png 768w\" sizes=\"auto, (max-width: 1081px) 100vw, 1081px\" \/><\/a><\/figure>\n\n\t\t\n\t\t<div class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-43282307 wp-block-group-is-layout-flex\">\n\t<p style=\"font-style:normal;font-weight:700\" class=\"has-link-color wp-elements-1 wp-block-lp-post-type has-text-color has-primary-color has-small-font-size\">Expert View<\/p>\n\n\t\t\n\t\t<h3 style=\"font-style:normal;font-weight:400\" class=\"wp-block-post-title has-base-font-size\"><a href=\"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/\" target=\"_self\" >Automate Entitlement Management using Microsoft Graph<\/a><\/h3><\/div>\n\t\t\n\t<\/div>\n\n","yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.4 (Yoast SEO v28.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Automate Entitlement Management using Microsoft Graph | Devoteam<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Automate Entitlement Management using Microsoft Graph\" \/>\n<meta property=\"og:description\" content=\"In a previous Linkedin article, Khaled Laghrour has shared with you how you can combine Privileged Identity Management and Entitlement Management to manage Microsoft Entra administrative roles. But when you start using Entitlement Management, you will notice that you have to configure different components and settings, and sometimes you do repetitive tasks such as adding [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/\" \/>\n<meta property=\"og:site_name\" content=\"Devoteam\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/automate-entitlement-management-using-microsoft-graph\\\/\",\"url\":\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/automate-entitlement-management-using-microsoft-graph\\\/\",\"name\":\"Automate Entitlement Management using Microsoft Graph | Devoteam\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/devoteam.info\\\/be\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/automate-entitlement-management-using-microsoft-graph\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/automate-entitlement-management-using-microsoft-graph\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/devoteam.info\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Khaled_MS_square.png\",\"datePublished\":\"2024-02-21T11:33:32+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/automate-entitlement-management-using-microsoft-graph\\\/#breadcrumb\"},\"inLanguage\":\"en-BE\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/automate-entitlement-management-using-microsoft-graph\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-BE\",\"@id\":\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/automate-entitlement-management-using-microsoft-graph\\\/#primaryimage\",\"url\":\"https:\\\/\\\/devoteam.info\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Khaled_MS_square.png\",\"contentUrl\":\"https:\\\/\\\/devoteam.info\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Khaled_MS_square.png\",\"width\":1081,\"height\":1081},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/automate-entitlement-management-using-microsoft-graph\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/devoteam.info\\\/be\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Expert View\",\"item\":\"https:\\\/\\\/devoteam.info\\\/be\\\/expert-view\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Automate Entitlement Management using Microsoft Graph\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/devoteam.info\\\/be\\\/#website\",\"url\":\"https:\\\/\\\/devoteam.info\\\/be\\\/\",\"name\":\"Devoteam\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/devoteam.info\\\/be\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-BE\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Automate Entitlement Management using Microsoft Graph | Devoteam","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/","og_locale":"en_US","og_type":"article","og_title":"Automate Entitlement Management using Microsoft Graph","og_description":"In a previous Linkedin article, Khaled Laghrour has shared with you how you can combine Privileged Identity Management and Entitlement Management to manage Microsoft Entra administrative roles. But when you start using Entitlement Management, you will notice that you have to configure different components and settings, and sometimes you do repetitive tasks such as adding [&hellip;]","og_url":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/","og_site_name":"Devoteam","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/","url":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/","name":"Automate Entitlement Management using Microsoft Graph | Devoteam","isPartOf":{"@id":"https:\/\/devoteam.info\/be\/#website"},"primaryImageOfPage":{"@id":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/#primaryimage"},"image":{"@id":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/#primaryimage"},"thumbnailUrl":"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square.png","datePublished":"2024-02-21T11:33:32+00:00","breadcrumb":{"@id":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/#breadcrumb"},"inLanguage":"en-BE","potentialAction":[{"@type":"ReadAction","target":["https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/"]}]},{"@type":"ImageObject","inLanguage":"en-BE","@id":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/#primaryimage","url":"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square.png","contentUrl":"https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square.png","width":1081,"height":1081},{"@type":"BreadcrumbList","@id":"https:\/\/devoteam.info\/be\/expert-view\/automate-entitlement-management-using-microsoft-graph\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/devoteam.info\/be\/"},{"@type":"ListItem","position":2,"name":"Expert View","item":"https:\/\/devoteam.info\/be\/expert-view\/"},{"@type":"ListItem","position":3,"name":"Automate Entitlement Management using Microsoft Graph"}]},{"@type":"WebSite","@id":"https:\/\/devoteam.info\/be\/#website","url":"https:\/\/devoteam.info\/be\/","name":"Devoteam","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/devoteam.info\/be\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-BE"}]}},"uagb_featured_image_src":{"full":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square.png",1081,1081,false],"thumbnail":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square-150x150.png",150,150,true],"medium":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square-300x300.png",300,300,true],"medium_large":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square-768x768.png",768,768,true],"large":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square-1024x1024.png",1024,1024,true],"1536x1536":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square.png",1081,1081,false],"2048x2048":["https:\/\/devoteam.info\/wp-content\/uploads\/2024\/11\/Khaled_MS_square.png",1081,1081,false]},"uagb_author_info":{"display_name":"wcraye","author_link":"https:\/\/devoteam.info\/be\/author\/"},"uagb_comment_info":0,"uagb_excerpt":"In a previous Linkedin article, Khaled Laghrour has shared with you how you can combine Privileged Identity Management and Entitlement Management to manage Microsoft Entra administrative roles. But when you start using Entitlement Management, you will notice that you have to configure different components and settings, and sometimes you do repetitive tasks such as adding&hellip;","_links":{"self":[{"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/expert-view\/514123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/expert-view"}],"about":[{"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/types\/expert-view"}],"version-history":[{"count":0,"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/expert-view\/514123\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/media\/154964"}],"wp:attachment":[{"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/media?parent=514123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/categories?post=514123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/tags?post=514123"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/devoteam.info\/be\/wp-json\/wp\/v2\/industry?post=514123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}