Skip to content

Update role requirements for custom authentication strength#1978

Open
andrequeda wants to merge 1 commit into
MicrosoftDocs:mainfrom
andrequeda:patch-3
Open

Update role requirements for custom authentication strength#1978
andrequeda wants to merge 1 commit into
MicrosoftDocs:mainfrom
andrequeda:patch-3

Conversation

@andrequeda
Copy link
Copy Markdown
Contributor

Doc mentioned that doing this action required at least Security Administrator, which is not correct (according to https://learn.microsoft.com/en-us/graph/api/authenticationstrengthpolicy-update?view=graph-rest-1.0&tabs=http), since Conditional Access Administrator also allows to perform the action and is arguably less privileged. So, changed the doc to indicate that either Conditional Access Administrator or Security Administrator can do it.

Alternatively, Security Administrator can be removed all together, leaving only Conditional Access Administrator.

Doc mentioned that doing this action required at least Security Administrator, which is not correct (according to https://learn.microsoft.com/en-us/graph/api/authenticationstrengthpolicy-update?view=graph-rest-1.0&tabs=http), since Conditional Access Administrator also allows to perform the action and is arguably less privileged.
So, changed the doc to indicate that either Conditional Access Administrator or Security Administrator can do it.

Alternatively, Security Administrator can be removed all together, leaving only Conditional Access Administrator.
@prmerger-automator
Copy link
Copy Markdown
Contributor

@andrequeda : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 5e2f752:

⚠️ Validation status: warnings

File Status Preview URL Details
docs/identity/authentication/concept-authentication-strength-advanced-options.md ⚠️Warning Details

docs/identity/authentication/concept-authentication-strength-advanced-options.md

  • Line 21, Column 93: [Warning: file-not-found - See documentation] Invalid file link: '~/identity/role-based-access-comtrol/permissions-reference.md'.

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

@v-regandowner
Copy link
Copy Markdown
Contributor

@InbarckMS

Can you review the proposed changes?

IMPORTANT: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants