了解如何在 Azure Active Directory 中将用户分配到应用Understand how users are assigned to apps in Azure Active Directory

本文介绍如何将用户分配给租户中的应用程序。This article help you to understand how users get assigned to an application in your tenant.

如何将用户分配给 Azure AD 中的应用程序?How do users get assigned to an application in Azure AD?

用户要访问应用程序,必须先以某种方式将其分配给该应用程序。For a user to access an application, they must first be assigned to it in some way. 可使用管理员、业务委托,或有时使用用户本身的身份执行分配。Assignment can be performed by an administrator, a business delegate, or sometimes, the user themselves. 下文介绍了可以将用户分配给应用程序的方式:Below describes the ways users can get assigned to applications:

  • 管理员直接将用户分配给应用程序An administrator assigns a user to the application directly
  • 管理员启用 自助服务组管理以允许用户 无需业务批准 ,即可加入已对其分配应用程序的组An administrator enables Self-service Group Management to allow a user to join a group that an application is assigned to without business approval
  • 管理员启用 自助服务组管理以允许用户在经过 选定业务批准者的事先批准 的情况下,加入已对其分配应用程序的组An administrator enables Self-service Group Management to allow a user to join a group that an application is assigned to, but only with prior approval from a selected set of business approvers
  • 对于第一方应用程序(如 Microsoft 365),管理员直接为用户分配许可证An administrator assigns a license to a user directly for a first party application, like Microsoft 365
  • 对于第一方应用程序(如 Microsoft 365),管理员直接为此用户所在的组分配许可证An administrator assigns a license to a group that the user is a member of to a first party application, like Microsoft 365
  • 管理员同意所有用户均可使用某个应用程序,然后用户登录该应用程序An administrator consents to an application to be used by all users and then a user signs in to the application
  • 通过登录应用程序,用户自己同意使用应用程序A user consents to an application themselves by signing in to the application

后续步骤Next steps