8.1 How to upgrade to Azure AD Driver 5.1.6

Below are the steps listed to upgrade the Azure AD Driver of version 5.1.6.

  1. Stop the IDM Server and driver on RL (remote Loader).

  2. Update the existing Azure AD Driver Files. For more information, see Step 4 for Linux and Step 5 for Windows.

  3. Upgrade the Azure AD Designer Packages using Designer. For more information see,Upgrading the Installed Packages.

    1. Application Schema changes for MS Graph APIs

    2. Schema Mapping Policy. For the complete list of schema changes, refer to Property differences between Azure AD Graph and Microsoft Graph

    3. Policies using the old schema.

      NOTE:If there are any customizations on the above policies then, the new changes coming from package need to be manually merged. Similarly, if there are any new policy created by you using the old schema name then, you need to change them.

  4. Configure the authentication type in driver parameters.

  5. Configure API permissions in Azure AD Application.

    Table 8-1 List of Application type of APIs

    API

    Type

    Description

    Admin Consent

    Application.Read.All

    Application

    Read all applications

    Grant Admin Consent

    Application.ReadWrite.All

    Application

    Read and write all applications

    Grant Admin Consent

    Channel.Create

    Application

    Create channels

    Grant Admin Consent

    Channel.Delete.All

    Application

    Delete channels

    Grant Admin Consent

    Channel.ReadBasic.All

    Application

    Read the names and descriptions of all channels

    Grant Admin Consent

    ChannelMember.Read.All

    Application

    Read the members of all channels

    Grant Admin Consent

    ChannelMember.ReadWrite.All

    Application

    Add and remove members from all channels

    Grant Admin Consent

    ChannelSettings.Read.All

    Application

    Read the names, descriptions, and settings of all channels

    Grant Admin Consent

    ChannelSettings.ReadWrite.All

    Application

    Read and write the names, descriptions, and settings of all channels

    Grant Admin Consent

    Device.Read.All

    Application

    Read all devices

    Grant Admin Consent

    Device.ReadWrite.All

    Application

    Read and write devices

    Grant Admin Consent

    Directory.Read.All

    Application

    Read directory data

    Grant Admin Consent

    Directory.ReadWrite.All

    Application

    Read and write directory data

    Grant Admin Consent

    Domain.ReadWrite.All

    Application

    Read and write domains

    Grant Admin Consent

    Group.Create

    Application

    Create groups

    Grant Admin Consent

    Group.Read.All

    Application

    Read all groups

    Grant Admin Consent

    Group.ReadWrite.All

    Application

    Read and write all groups

    Grant Admin Consent

    GroupMember.Read.All

    Application

    Read all group memberships

    Grant Admin Consent

    GroupMember.ReadWrite.All

    Application

    Read and write all group memberships

    Grant Admin Consent

    Team.Create

    Application

    Create teams

    Grant Admin Consent

    Team.ReadBasic.All

    Application

    Get a list of all teams

    Grant Admin Consent

    TeamMember.Read.All

    Application

    Read the members of all teams

    Grant Admin Consent

    TeamMember.ReadWrite.All

    Application

    Add and remove members from all teams

    Grant Admin Consent

    TeamMember.ReadWriteNonOwnerRole.All

    Application

    Add and remove members with non-owner role for all teams

    Grant Admin Consent

    TeamSettings.Read.All

    Application

    Read all teams' settings

    Grant Admin Consent

    TeamSettings.ReadWrite.All

    Application

    Read and change all teams' settings

    Grant Admin Consent

    User.Read.All

    Application

    Grant Admin Consent

    User.ReadWrite.All

    Application

    Read and write all users' full profiles

    Grant Admin Consent

    Table 8-2 List of Delegated Type of APIs

    API

    Type

    Description

    Admin Consent

    Directory.ReadWrite.All

    Delegated

    Read and write directory data

    Grant Admin Consent

    Group.Read.All

    Delegated

    Read all groups

    Grant Admin Consent

    Group.ReadWrite.All

    Delegated

    Read and write all groups

    Grant Admin Consent

    GroupMember.Read.All

    Delegated

    Read group memberships

    Grant Admin Consent

    GroupMember.ReadWrite.All

    Delegated

    Read and write group memberships

    Grant Admin Consent

    RoleManagement.Read.All

    Delegated

    Read role management data for all RBAC providers

    Grant Admin Consent

    RoleManagement.Read.Directory

    Delegated

    Read directory RBAC settings

    Grant Admin Consent

    User.Read

    Delegated

    Sign in and read user profile

    Grant Admin Consent

    User.Read.All

    Delegated

    Read all users' full profiles

    Grant Admin Consent

    User.ReadBasic.All

    Delegated

    Read all users' basic profiles

    Grant Admin Consent

    User.ReadWrite

    Delegated

    Read and write access to user profile

    Grant Admin Consent

    User.ReadWrite.All

    Delegated

    Read and write all users' full profiles

    Grant Admin Consent

  6. Configure Secure Communication. For more information see Securing Driver Communication

  7. Perform Post Upgrade Tasks. For more information see Post Upgrade Tasks

  8. Start the IDM Server and driver on RL.