我正在尝试通过MS Graph Explorer更新我的Azure AD应用程序的AppRoles。该应用程序用于使用我们的AWS帐户设置SSO。
URI看起来像下面。GET查询正确返回服务主体的所有属性。https://graph.microsoft.com/beta/servicePrincipals/2141b14a-096a-4f26-a73f-4175a4f475f7
但是当尝试“PATCH”的“appRoles”的部分时，我收到了下面的错误：

{
    "error": {
        "code": "Request_BadRequest",
        "message": "One or more properties on the service principal does not match the application object.",
        "innerError": {
            "request-id": "0408c2a3-1f1c-4dd6-aacf-6c2c1cca8b98",
            "date": "2018-08-10T01:13:40"
        }
    }
}

请求体如下所示（代码稍微修改了屏蔽）

{   "appRoles": [
{
  "allowedMemberTypes": [
    "User"
  ],
  "displayName": "AWS Developers",
  "id": "7dfd756e-8c17-4472-b2b7-38c17fc5de79",
  "isEnabled": true,
  "description": "Developers",
  "value": "arn:aws:iam::12345678910:role/developers-SAML-AzureAD,arn:aws:iam::12345678910:saml-provider/AzureAD"
},
{
  "allowedMemberTypes": [
    "User"
  ],
  "displayName": "AWS Admins",
  "id": "7dfd756e-8c27-4412-b1b7-38c17fc1de83",
  "isEnabled": true,
  "description": "AWS-Admins-SAML-AzureAD",
  "value": "arn:aws:iam::12345678910:role/Admins-SAML-AzureAD,arn:aws:iam::12345678910:saml-provider/AzureAD"
},
{
  "allowedMemberTypes": [
    "User"
  ],
  "displayName": "IT MGMT",
  "id": "7dfd756e-8c17-4172-b1b7-38c11fc1de81",
  "isEnabled": true,
  "description": "ITS-MGMT-SAML-AzureAD",
  "value": "arn:aws:iam::12345678910:role/ITMGMT-SAML-AzureAD,arn:aws:iam::12345678910:saml-provider/AzureAD"
},
{
  "allowedMemberTypes": [
    "User"
  ],
  "displayName": "S3 Bucket Admins",
  "id": "7dfd756e-8c17-4412-b1b1-31c17fc1de18",
  "isEnabled": true,
  "description": "AWS-S3-Admins-SAML-AzureAD",
  "value": "arn:aws:iam::12345678910:role/AWS-S3-Admins-SAML-AzureAD,arn:aws:iam::12345678910:saml-provider/AzureAD"
},
{
  "allowedMemberTypes": [
    "User"
  ],
  "displayName": "EC2 Admins",
  "id": "7d1d756e-8c27-4471-12b7-38c17fc5de78",
  "isEnabled": true,
  "description": "AWS-EC2-Admins-SAML-AzureAD",
  "value": "arn:aws:iam::12345678910:role/AWS-EC2Admins-SAML-AzureAD,arn:aws:iam::12345678910:saml-provider/AzureAD"
},
{
  "allowedMemberTypes": [
    "User"
  ],
  "displayName": "Network Admins",
  "id": "1dfd756e-8c27-4472-b2b7-38c11fc5de67",
  "isEnabled": true,
  "description": "AWS-Network-Admins-SAML-AzureAD",
  "value": "arn:aws:iam::12345678910:role/Network-Admins-SAML-AzureAD,arn:aws:iam::12345678910:saml-provider/AzureAD"
},
{
  "allowedMemberTypes": [
    "User"
  ],
  "displayName": "msiam_access",
  "id": "7dfd756e-8c21-1471-b1b7-11c27fc5de5e",
  "isEnabled": true,
  "description": "msiam_access",
  "value": null
}]}

我验证了JSON代码，但MS Graph Explorer仍然告诉我缺少一些东西。
我尝试使用Azure AD应用程序的所有属性运行PATCH查询，但收到了相同的错误。
以前有人遇到过这种情况吗？你有什么办法