Skip to content

Commit 4ff2e2f

Browse files
committed
update images
1 parent 752ba91 commit 4ff2e2f

6 files changed

Lines changed: 11 additions & 2 deletions

File tree

support/entra/entra-id/app-integration/application-delegated-permission-access-tokens-identity-platform.md

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,14 +42,23 @@ To determine whether an access token is a delegated or application permission to
4242

4343
For application permission tokens, the permissions are in the `roles` claim:
4444

45-
:::image type="content" source="media/application-delegated-permission-access-tokens-identity-platform/roles-claim.png" alt-text="Screenshot that shows the 'roles' claim.":::
45+
```json
46+
"oid": "<oid>"
47+
"roles": [
48+
"User.Read.All"
49+
],
50+
"sub": "<sub>"
51+
```
4652

4753
> [!NOTE]
4854
> The `scp` claim is absent in application permission tokens.
4955
5056
For delegated permission tokens, the permissions are in the `scp` claim:
5157

52-
:::image type="content" source="media/application-delegated-permission-access-tokens-identity-platform/scp-claim.png" alt-text="Screenshot that shows the 'scp' claim.":::
58+
```json
59+
"scp": "Directory.Read.All User.Read",
60+
"sub": "<sub>"
61+
```
5362

5463
> [!NOTE]
5564
> The `roles` claim might still appear in a delegated permission token, but it lists the roles assigned to the user in the API app.
Loading
Loading

0 commit comments

Comments
 (0)