Connect using BYOT via a Managed Identity in Azure Functions

[colinrippeyfinarne]

I have tons of use cases for running Powershell scripts in Azure Functions. What I do at the moment is obtain my Managed Identity bearer token (which I have previously granted permissions to) and the use the Invoke-WebRequest commandlet against the raw Graph API.
It would be great if as part of the Connect commandlet I was able to either pass in my already obtained bearer token, or even maybe ask the Connect commandlet to go get it for me.
AB#5613

[darrelmiller]

This is a scenario that is definitely on our roadmap.

[edyoung]

This will also enable transparent auth in Cloud Shell

[darrelmiller]

This functionality is dependent on work we are doing in .Graph SDK .NET 2.0.

[tobvil]

Would be awesome if would could use the module in Azure Functions.

[jannickoeben]

Would love to see an accesstoken parameter. This would leave the option open to do cross-tenant/multi-tenant queries.

[ddyett]

This is for Connect-Graph having a -token option to allow bypassing the normal code.

[georgend]

@colinrippeyfinarne we have added a new CmdLet Invoke-GraphRequest, inspired by Invoke-WebRequest.
The new cmdlet has a -Token parameter that enables you to pass your required token as a SecureString.
For example:-
Invoke-GraphRequest -Uri https://graph.microsoft.com/beta/me -Token $token -Authentication UserProvidedToken

[colinrippeyfinarne]

@colinrippeyfinarne we have added a new CmdLet Invoke-GraphRequest, inspired by Invoke-WebRequest.
The new cmdlet has a -Token parameter that enables you to pass your required token as a SecureString.
For example:-
Invoke-GraphRequest -Uri https://graph.microsoft.com/beta/me -Token $token -Authentication UserProvidedToken

Thanks for the details, but I hope that this is not the resolution to the request? I hope you are still looking to add a -Token parameter to the Connect commandlet as I want to use all the lovely wrapper commandlets after connecting via Connect.

It will of course be useful to have the Invoke-GraphRequest commandlet, but surely one of the points of this library is to abstract away having to craft up raw urls and deal in a higher level scripting model?

Thanks again though for the details, it will be very useful.

[georgend]

@colinrippeyfinarne We have added -AccessToken to Connect-Graph cmdlet in v1.0.1. Please take a look and give us feedback if it suits your needs. Thanks

[colinrippeyfinarne]

@colinrippeyfinarne We have added -AccessToken to Connect-Graph cmdlet in v1.0.1. Please take a look and give us feedback if it suits your needs. Thanks

Brilliant, thanks for the update.