是否可以通过 Powershell 将 Microsoft Graph 委派权限添加到 Azure AD 应用程序？

是的，可以通过PowerShell设置委派的 API 权限

最初，请注意可以通过以下 cmdlet 检索的新应用程序的AppID ：

Get-AzureADApplication -Filter "DisplayName eq $myapp"

使用以下 cmdlet检查您是否有名为“ Microsoft Graph ”的服务主体：

Get-AzureADServicePrincipal -All $true | ? { $_.DisplayName -eq "Microsoft Graph" }

为了通过 PowerShell 分配 API 权限，您应该知道可以使用以下 cmdlet 显示的那些委派权限的GUID ：

$MSGraph.Oauth2Permissions | FT ID, Value

请注意所需权限的 ID，例如 Calendars.Read、Application.Read.All 和 Directory.Read.All

请在下面找到完整的脚本：

$myapp = New-AzureADApplication -DisplayName  MyApp 
$myappId=$myapp.ObjectId
 
Get-AzureADApplication -Filter "DisplayName eq 'MyApp'"
$MSGraph = Get-AzureADServicePrincipal -All $true | ? { $_.DisplayName -eq "Microsoft Graph" }
$MSGraph.Oauth2Permissions | FT ID, Value

# Create a Resource Access resource object and assign the service principal’s App ID to it.
$Graph = New-Object -TypeName "Microsoft.Open.AzureAD.Model.RequiredResourceAccess"
$Graph.ResourceAppId = $MSGraph.AppId

# Create a set of delegated permissions using noted IDs
$Per1 = New-Object -TypeName "Microsoft.Open.AzureAD.Model.ResourceAccess" -ArgumentList "c79f8feb-a9db-4090-85f9-90d820caa0eb","Scope"

$Per2 = New-Object -TypeName "Microsoft.Open.AzureAD.Model.ResourceAccess" -ArgumentList "465a38f9-76ea-45b9-9f34-9e8b0d4b0b42","Scope"

$Per3 = New-Object -TypeName "Microsoft.Open.AzureAD.Model.ResourceAccess" -ArgumentList "06da0dbc-49e2-44d2-8312-53f166ab848a","Scope"

$Graph.ResourceAccess = $Per1, $Per2, $Per3

# Set the above resource access object to your application ObjectId so permissions can be assigned.
Set-AzureADApplication -ObjectId $myappId -RequiredResourceAccess $Graph

参考：

如何使用 PowerShell 为 Azure AD App 分配权限？