Invoke-retMethod：远程服务器返回错误：（400）不良请求。 Azure AAD添加组成员

Question

我遵循Azure文档，并创建了以下请求，使用PowerShell脚本将成员添加到AD组中。但是获得错误的不良请求。

    $clientId = "d4b2ca57-yyyy-yyyy-zzzz-50a4ca126390"
$clientSecret = "nnr7Q~zzzzz"
$tenantID = "4f6eyyyy-yyyy-yyyy-yyyy-0981d022yyyy"


$ReqTokenBody = @{
    Grant_Type    = "client_credentials"
    Scope         = "https://graph.microsoft.com/.default"
    client_Id     = $clientId
    Client_Secret = $clientSecret
}
$TokenResponse = Invoke-RestMethod -Uri "https://login.microsoftonline.com/domain.onmicrosoft.com/oauth2/v2.0/token" -Method POST -Body $ReqTokenBody

$TokenResponse
$token = $TokenResponse.access_token
$token
$Headers = @{"Authorization" = "Bearer $token"}
$Headers
#Get group List -> working fine
$AadGroupListRequestParams = @{
    Method  = 'GET'
    Uri     = 'https://graph.microsoft.com/v1.0/groups'
    Headers = @{
        'Authorization' = "Bearer $token" 
    }
}
$AadGroupRequestzzz = Invoke-RestMethod @AadGroupListRequestParams
$AadGroupRequestzzz.value

#Add member to group -> not working
$AadGroupMemberAddRequestParams = @{
    Method  = 'POST'
    Uri     = 'https://graph.microsoft.com/v1.0/groups/fb30b950-yyyy-yyyy-yyyy-6015f411ec3c/members/$ref'
    Headers = @{
        'Authorization' = "Bearer $token" 
    }
    Body = @{
     '@odata.id' = "https://graph.microsoft.com/v1.0/directoryObjects/673cf709-yyyy-yyyy-yyyy-c5c476d6yyyy"
}
}

＃tried分别传递在param下，仍然没有用 $ params = @{ “@odata.id” =“ https://graph.microsoft.com/v1.0/directoryobjects/673cf709-yyyyyyyyyyyyyyyyyyyy-yyyy-C5C476D6Yyyyy” }

$AadGroupAddMemberRequest = Invoke-RestMethod @AadGroupMemberAddRequestParams -ContentType "application/json" -Verbose
$AadGroupAddMemberRequest.value

错误：

Invoke-restMethod：远程服务器返回错误：（400）不良请求。

Answer 1

请求主体需要采用JSON格式，因为您将参数 contentType 作为application/json

添加成员 - 请求body

在请求正文中，提供添加目录的JSON代表，用户，组或组织联系对象。

在身体上使用转换> json

Body = @{
     '@odata.id' = "https://graph.microsoft.com/v1.0/directoryObjects/673cf709-yyyy-yyyy-yyyy-c5c476d6yyyy"
} | ConvertTo-Json