Identity and access | Governance (v1.0): 9 API change passages

Added the externalSapAcConnectionInfo complex type, along with the supporting authenticationInfo and clientCredentialAuthenticationInfo types, to configure connections from Microsoft Entra entitlement management to SAP Access Control (AC) systems. Set these on the connectionInfo property of an externalOriginResourceConnector when its connectorType is sapAc . Promoted the Lifecycle Workflows provisioning and workflow subject APIs from beta to v1.0, introducing a broader, extensible subject model for workflows and surfacing per-subject processing results. The promoted surface includes: workflowSubject base type and its provisioningObjectWorkflowSubject and directoryObjectWorkflowSubject derived types subjectProcessingResult resource with the subjectProcessingResults navigation property on the run and workflow resources subjectSummary resource and the summary method on the subjectProcessingResult resource activateAndWait action on the workflow resource, returning the awaitedWorkflowProcessingResult resource provisioningAttributeMapping and attributeSetEntry resources customTaskExtensionResponseData resource, the replyMode property on customTaskExtension , and the targetSubject property on customTaskExtensionCalloutData targetSubjectType property on workflowBase and workflowSubject property on taskProcessingResult subjectType and customTaskExtensionReplyMode enumerations, along with the extensibility and extensibilityOnDemand enumeration members Added the externalOriginResourceConnector resource type and methods to create , list , get , update , and delete connections from Microsoft Entra entitlement management to SAP Identity Access Governance (SAP IAG). For an SAP IAG connector, specify the SAP IAG endpoint, OAuth token endpoint, and client ID, along with the Azure subscription, resource group, key vault, and secret that identify where its client secret is stored. The connector is associated with an access package resource so that entitlement management can provision access to resources in SAP IAG through access packages. Added the reviewerId and scopeType properties to accessReviewReviewerScope to specify a reviewer directly or as a well-known scope instead of through a query. Added the applyDescription property to accessReviewInstanceDecisionItem to describe the result of applying a decision. Added the appRoleId and appRoleDisplayName properties to accessReviewInstanceDecisionItemServicePrincipalResource to identify the app role under review. Added the errors property to accessReviewInstance and the accessReviewError resource type to report errors that occur during the review instance lifecycle. Added the accessReviewPrincipalScope , accessReviewResourceScope , and accessReviewAccessPackageAssignmentPolicyScope resource types. Use them in the principalScopes and resourceScopes properties of principalResourceMembershipsScope to state which principals have their access to which resources reviewed without writing a query expression. Added the accessReviewPrincipalScopeType , accessReviewResourceScopeType , and accessReviewReviewerScopeType enumeration types to identify well-known principal, resource, and reviewer scopes.

Permanent link to this revision