use claims princpal to access previous authenticated users in Asp.NET web core app

Question

I am using Azure AD to authenticate users and then use the user and access their claims, access msgraph, and insert data to their calendar.

Now what I want is to save this user so an admin in my asp.net web core app can insert data to this user that exists in the database. Is that possible?

Yes, it's possible, no, you don't use the other user's claims (**never**). If the admin is an actual AAD admin, they can do things for others. You should read how AAD permissions work. — Camilo Terevinto, Dec 19 '20 at 22:48

score 0 · Accepted Answer · answered Dec 21 '20 at 03:02

0

An AAD admin can insert data to other users' calendar only when the admin have access to those users' mailboxes.

To archive this, you need to configure that other user gives mailbox permissions "Full Access" to the admin account. And add delegated permission: Calendars.ReadWrite.Shared into the Azure AD app.

See details from my previous answer.

answered Dec 21 '20 at 03:02

Allen Wu

15,529
1
9
20

If my answer is helpful for you, you can accept it as answer( click on the check mark beside the answer to toggle it from greyed out to filled in.). See https://meta.stackexchange.com/questions/5234/how-does-accepting-an-answer-work. This can be beneficial to other community members. Thank you. – Allen Wu Dec 21 '20 at 03:02

use claims princpal to access previous authenticated users in Asp.NET web core app

1 Answers1