Below are the steps listed to upgrade the Azure AD Driver of version 5.1.5.
Stop the IDM Server and driver on RL (remote Loader).
Update the existing Azure AD Driver Files. For more information, see Step 4 for Linux and Step 5 for Windows.
Upgrade the Azure AD Designer Packages using Designer. For more information see,Upgrading the Installed Packages.
Application Schema changes for MS Graph APIs
Schema Mapping Policy. For the complete list of schema changes, refer to Property differences between Azure AD Graph and Microsoft Graph
Policies using the old schema.
NOTE:If there are any customizations on the above policies then, the new changes coming from package need to be manually merged. Similarly, if there are any new policy created by you using the old schema name then, you need to change them.
Configure the authentication type in driver parameters.
Configure API permissions in Azure AD Application.
Table 7-1 List of Application type of APIs
|
API |
Type |
Description |
Admin Consent |
|---|---|---|---|
|
Application.Read.All |
Application |
Read all applications |
Grant Admin Consent |
|
Application.ReadWrite.All |
Application |
Read and write all applications |
Grant Admin Consent |
|
Device.Read.All |
Application |
Read all devices |
Grant Admin Consent |
|
Device.ReadWrite.All |
Application |
Read and write devices |
Grant Admin Consent |
|
Directory.Read.All |
Application |
Read directory data |
Grant Admin Consent |
|
Directory.ReadWrite.All |
Application |
Read and write directory data |
Grant Admin Consent |
|
Domain.ReadWrite.All |
Application |
Read and write domains |
Grant Admin Consent |
|
Group.Create |
Application |
Create groups |
Grant Admin Consent |
|
Group.Read.All |
Application |
Read all groups |
Grant Admin Consent |
|
Group.ReadWrite.All |
Application |
Read and write all groups |
Grant Admin Consent |
|
GroupMember.Read.All |
Application |
Read all group memberships |
Grant Admin Consent |
|
GroupMember.ReadWrite.All |
Application |
Read and write all group memberships |
Grant Admin Consent |
|
User.Read.All |
Application |
Read all users' full profiles |
Grant Admin Consent |
|
User.ReadWrite.All |
Application |
Read and write all users' full profiles |
Grant Admin Consent |
Table 7-2 List of Delegated type of APIs
|
API |
Type |
Description |
Admin Consent |
|---|---|---|---|
|
Directory.AccessAsUser.All |
Delegated |
Access directory as the signed in user |
Grant Admin Consent |
|
Directory.Read.All |
Delegated |
Read directory data |
Grant Admin Consent |
|
Directory.ReadWrite.All |
Delegated |
Read and write directory data |
Grant Admin Consent |
|
Group.Read.All |
Delegated |
Read all groups |
Grant Admin Consent |
|
Group.ReadWrite.All |
Delegated |
Read and write all groups |
Grant Admin Consent |
|
GroupMember.Read.All |
Delegated |
Read group memberships |
Grant Admin Consent |
|
GroupMember.ReadWrite.All |
Delegated |
Read and write group memberships |
Grant Admin Consent |
|
RoleManagement.Read.All |
Delegated |
Read role management data for all RBAC providers |
Grant Admin Consent |
|
RoleManagement.Read.Directory |
Delegated |
Read directory RBAC settings |
Grant Admin Consent |
|
User.Read |
Delegated |
Sign in and read user profile |
Grant Admin Consent |
|
User.Read.All |
Delegated |
Read all users' full profiles |
Grant Admin Consent |
|
User.ReadBasic.All |
Delegated |
Read all users' basic profiles |
Grant Admin Consent |
|
User.ReadWrite |
Delegated |
Read and write access to user profile |
Grant Admin Consent |
|
User.ReadWrite.All |
Delegated |
Read and write all users' full profiles |
Grant Admin Consent |
Configure Secure Communication. For more information see Securing Driver Communication
Perform Post Upgrade Tasks. For more information see Post Upgrade Tasks
Start the IDM Server and driver on RL.