Azure AD Graph API - Ensure RealTime Service Functionality Beyond February 1, 2025

RealTime Service relies on Azure AD Graph APIs in its integration with Resource Central, Exchange Central and WebTeam Central. To ensure uninterrupted functionality after February 1, 2025, you need to explicitly allow extended Azure AD Graph access. Follow the steps below to update your application settings using the Microsoft Graph PowerShell SDK.

PowerShell Script to Enable Extended Access

Import-Module Microsoft.Graph.Beta.Applications

$params = @{
    authenticationBehaviors = @{
        blockAzureADGraphAccess = $false
    }
}

Update-MgBetaApplication -ApplicationId $applicationId -BodyParameter $params

Instructions

1. Install Microsoft Graph PowerShell SDK:
   • If not already installed, download and install the SDK.
   • Follow the guide here: Microsoft Graph PowerShell SDK.
   • Follow the guide here: Allow extended Azure AD Graph access until June 30, 2025
2. Update $applicationId: Replace $applicationId with the Application (Client) ID of your Resource Central/RealTime Service instance in Azure AD.
3. Execute the Script:
   • Open PowerShell on your system.
   • Authenticate to your Azure tenant using Connect-MgGraph.
   • Run the script to apply the changes. Note: $applicationId = Object ID
4. Verify Configuration:
   • Check the settings in your Azure AD portal.
   • Use Graph Explorer to validate the blockAzureADGraphAccess parameter is set to false.

Key Deadlines and Considerations

• February 1, 2025: Applications must explicitly opt in for extended Azure AD Graph access. Without this configuration, calls to Azure AD Graph APIs will return a 403 Unauthorized error.
• June 30, 2025: Extended access ends. All applications must fully migrate to Microsoft Graph by this date to maintain functionality.