azure-msgraph-change-notification-client-state-input
The clientState shared secret is supplied when a Graph subscription is created and is echoed in notifications for validation. No single Azure RBAC action authorizes this service-native path; its own authentication and authorization apply.
Where it sits
| location | microsoft.graph.subscription.clientState |
|---|
| location kind | secret_value |
|---|
| data kinds | credential webhook_secret |
|---|
| emits edge | ContainsSecret |
|---|
| service | Microsoft Graph (app permissions) (azure:msgraph) |
|---|
Collection recipe
| access mode | write_only_input |
|---|
| operation | POST /subscriptions |
|---|
| response path | request.clientState |
|---|
| encoding | json |
|---|
| params | {"tenant": "\u003ctenant-id\u003e"} |
|---|
References