Why is “Application permissions” disabled in Azure AD's “Request API permissions”?

Question

I\'m trying to give a console app permission to call an API in Azure AD.

When I go to \"Add permissions,\" \"application permissions\" is grayed out and I can only s

Answer 1

Per my understanding, you are exposing your custom api protected by Azure AD. If so, you need to define the application permission by editing the manifest of your api app.

manifest:

"appRoles": [
        {
            "allowedMemberTypes": [
                "Application"
            ],
            "description": "Apps that have this role have the ability to invoke my API",
            "displayName": "Can invoke my API",
            "id": "fc803414-3c61-4ebc-a5e5-cd1675c14bbb",
            "isEnabled": true,
            "lang": null,
            "origin": "Application",
            "value": "myTestRole"
        }
    ]

Then the application permission will show up.