Get-AzureADUserAppRoleAssignment
This article provides migration details from Get-AzureADUserAppRoleAssignment command to Microsoft Graph PowerShell.
Summary
- Azure AD Command: Get-AzureADUserAppRoleAssignment
- Azure AD Module: AzureAD
- Microsoft Graph Command: Get-MgUserAppRoleAssignment (Community Examples)
- Graph Module: Microsoft.Graph.Applications
- Graph Endpoint: GET /users/{user-id}/appRoleAssignments | /users/{user-id}/appRoleAssignments/{appRoleAssignment-id}
Permissions
| Permission type | Least privileged permissions | Higher privileged permissions |
|---|---|---|
| Delegated (work or school account) | AppRoleAssignment.ReadWrite.All | Directory.Read.All |
| Delegated (personal Microsoft account) | Not supported. | Not supported. |
| Application | Directory.Read.All | AppRoleAssignment.ReadWrite.All |
View more details on permissions.
Property Mapping
| Azure AD Name | Microsoft Graph Name |
|---|---|
| ObjectId | UserId |