6.1 How to upgrade to Azure AD Driver 5.1.6

Below are the steps listed to upgrade the Azure AD Driver of version 5.1.6.

  1. Stop the IDM Server and driver on RL (remote Loader).

  2. Update the existing Azure AD Driver Files. For more information, see Step 4 for Linux and Step 5 for Windows.

  3. Upgrade the Azure AD Designer Packages using Designer. For more information see,Upgrading the Installed Packages.

    1. Application Schema changes for MS Graph APIs.

    2. Schema Mapping Policy. For the complete list of schema changes, refer to Property differences between Azure AD Graph and Microsoft Graph

    3. Policies using the old schema.

      NOTE:If there are any customizations on the above policies then, the new changes coming from package need to be manually merged. Similarly, if there are any new policy created by you using the old schema name then, you need to change them.

  4. Configure the authentication type in driver parameters.

  5. Configure API permissions in Azure AD Application.

    NOTE:In addition to the API permissions configured for Azure AD Driver 5.1.5, you need to add following new permissions.

    Table 6-1 List of Application type of APIs

    API

    Type

    Description

    Admin Consent

    Channel.Create

    Application

    Create channels

    Grant Admin Consent

    Channel.Delete.All

    Application

    Delete channels

    Grant Admin Consent

    Channel.ReadBasic.All

    Application

    Read the names and descriptions of all channels

    Grant Admin Consent

    ChannelMember.Read.All

    Application

    Read the members of all channels

    Grant Admin Consent

    ChannelMember.ReadWrite.All

    Application

    Add and remove members from all channels

    Grant Admin Consent

    ChannelSettings.Read.All

    Application

    Read the names, descriptions, and settings of all channels

    Grant Admin Consent

    ChannelSettings.ReadWrite.All

    Application

    Read and write the names, descriptions, and settings of all channels

    Grant Admin Consent

    Team.Create

    Application

    Create teams

    Grant Admin Consent

    Team.ReadBasic.All

    Application

    Get a list of all teams

    Grant Admin Consent

    TeamMember.Read.All

    Application

    Read the members of all teams

    Grant Admin Consent

    TeamMember.ReadWrite.All

    Application

    Add and remove members from all teams

    Grant Admin Consent

    TeamMember.ReadWriteNonOwnerRole.All

    Application

    Add and remove members with non-owner role for all teams

    Grant Admin Consent

    TeamSettings.Read.All

    Application

    Read all teams' settings

    Grant Admin Consent

    TeamSettings.ReadWrite.All

    Application

    Read and change all teams' settings

    Grant Admin Consent

  6. Configure Secure Communication. For more information see Securing Driver Communication

  7. Start the IDM Server and driver on RL.