Why should we use the Batchtool to transition from DAP to GDAP and not a Rest-API?
Until October 2022, we have to transition all old DAP relationships to GDAP relationships using the batchtool (https://github.com/microsoft/PartnerCenter-GDAPTransition).
I'm wondering why we should use this batch tool and can't use a Rest-API for it.
We already have a lot of Java code that makes Rest-API calls anyway. We implemented that for the NCE migration and other things. And our Java code already supports authentication, CSV-processing, logging, error handling and parallelization. It would be much easier if we could just reuse that and then call a Rest-API.
On the other hand, I was not able to compile the C# code of the batchtool, because I do not have a license for Visual Studio, and I am not allowed to use the free license for Visual Studio Express, because my company has more than 250 PC and an annual sales of more than 1 million USD.
This Batchtool internally calls the following Rest-API:
This Rest-API expects in the request body a delegatedAdminRelationship object (documented here: https://docs.microsoft.com/en-us/graph/api/tenantrelationship-post-delegatedadminrelationships?view=graph-rest-beta&tabs=http).
I was able to test this Rest-API successfully. The only thing is that there is no official documentation of this REST-API.
Then why do we have to use this batch tool, when there is also this Rest-API available?
Here you can find the new timeline:
We're providing partners with more time to make the transition from delegated admin privileges (DAP) to granular delegated admin privileges (GDAP).
Starting January 17, 2023
- Microsoft will stop creating DAP relationships when a new customer or reseller relationship is created.
- Microsoft will start removing inactive DAP relationships that haven't been used in 90 days.
Starting March 1, 2023
- The Bulk Migration Tool to upgrade existing DAP connections that were granted by customers to GDAP will no longer be available.
- Microsoft will begin to transition remaining active DAP relationships to GDAP with limited Azure Active Directory (Azure AD) roles to perform least-privilege customer management activities. Partners will be required to perform more steps to continue to have access to Azure subscriptions after the limited roles are granted, as documented.
thanks for this one, I have already seen this. So, you are also reading this like that it is implied, that the Batchtool will be available and working until end of February 2023, right?
@UweStahl As Partner you also have Visual Studio Subscriptions as MPN benefit - don't know if they have been consumed within your org already.
Will forward this question internally and check if I can get an answer if the API is intended to be opened for the public (meaning, documented). Since this migration option (without customer consent) will only last until October 31, 2022, I guess there are no plans for that.
Receive consultations via Technical Presales and Deployment Services team