[Feature Request] Provide native commands for `appRoleAssignment` API

[jiasli]

Related command az ad app permission admin-consent

Is your feature request related to a problem? Please describe. Currently az ad app permission admin-consent uses "internal, deprecated, and unsupported" API at https://main.iam.ad.ext.azure.com/ to grand admin consent:

https://github.com/Azure/azure-cli/blob/710c821b2920df504ae037e7b05763193b051a30/src/azure-cli/azure/cli/command_modules/role/custom.py#L928-L938

This API doesn't work on clouds other than AzureCloud, such as AzureChinaCloud, dogfood or Azure Stack.

Even though Graph team is working on an equivalent API on Microsoft Graph API, there is no ETA.

The alternative supported way is to utilize appRoleAssignment API to grant application permissions, even though there is still some feature gap between appRoleAssignment API and the old API.

Examples for using az rest to call appRoleAssignment API was previously given in https://github.com/Azure/azure-cli/issues/12137#issuecomment-596567479.

Still, it will be better if we can have native commands for appRoleAssignment API.

[yonzhan]

Looking forward for the native commands.

[rvdwegen]

Is there any news on this? I'm currently (re)developing a product for my organization and I'd prefer to not have to use features which may deprecate in an unknown timeframe.

[jiasli]

@rvdwegen, currently you may use az rest to call appRoleAssignment APIs (https://github.com/Azure/azure-cli/issues/12137#issuecomment-596567479).

In the meantime, might I recommend the Subscribe button?

That way you'll be notified of any updates to this thread.