Accessing the APIs
As APIs expose a lot of sensitive data and, in many cases, give you the ability to change significant settings, their exposure is protected by default. To get access, you’ll need to open up access, which is typically protected behind an access token or certificate.
For the APIs discussed in the last section, you’ll manage permissions to the APIs using Azure AD app registrations. So, we’ll guide you through creating an app registration, then use PowerShell as an example of using the APIs.
Creating an app registration for API access
As you create the app registration, you’ll get to choose which API permissions are exposed, then obtain the credentials to access those APIs. We’re going to use application permissions, which means they can run without a dedicated signed-in user (compared to delegated permissions, which access the API as an authenticated user).
To perform the following, you should be an Azure AD global administrator...
