rbacApplication resource type
Namespace: microsoft.graph
Important
APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Role management container for unified role definitions and role assignments for Microsoft 365 RBAC providers. Currently directory and entitlement management are the only RBAC applications supported.
Methods
| Method | Return Type | Description |
|---|---|---|
| Create role assignment | unifiedRoleAssignment | Create a new unifiedRoleAssignment by posting to the roleAssignments collection. |
| List role assignment | unifiedRoleAssignment collection | Get a unifiedRoleAssignment object collection. Only specific instances can be queried, by filtering on roleDefitionId or principalId. |
| List transitive role assignments | unifiedRoleAssignment collection | Get direct and transitive unifiedRoleAssignments assigned to a specific principal. Specifying principalId is required. |
| Create role definition | unifiedRoleDefinition | Create a new unifiedRoleDefinition by posting to the roleDefinitions collection. |
| List role definitions | unifiedRoleDefinition collection | Get a unifiedRoleDefinition object collection. |
| List role schedules | unifiedRoleScheduleBase collection | Function to retrieve a collection of unifiedRoleScheduleBase objects. |
| List role schedule instances | unifiedRoleScheduleInstanceBase collection | Function to retrieve a collection of unifiedRoleScheduleInstanceBase objects. |
Properties
None
Relationships
| Relationship | Type | Description |
|---|---|---|
| resourceNamespaces | unifiedRbacResourceNamespace collection | Resource that represents a collection of related actions. |
| roleAssignments | unifiedRoleAssignment collection | Resource to grant access to users or groups. |
| roleDefinitions | unifiedRoleDefinition collection | Resource representing the roles allowed by RBAC providers and the permissions assigned to the roles. |
| roleAssignmentApprovals | approval collection | Decisions associated with a role assignment approval. |
| roleAssignmentScheduleInstances | unifiedRoleAssignmentScheduleInstance collection | Instances for active role assignments through Microsoft Entra Privileged Identity Management. |
| roleAssignmentScheduleRequests | unifiedRoleAssignmentScheduleRequest collection | Requests for active role assignments through Microsoft Entra Privileged Identity Management. |
| roleAssignmentSchedules | unifiedRoleAssignmentSchedule collection | Schedule for active role assignments through Microsoft Entra Privileged Identity Management. |
| roleEligibilityScheduleInstances | unifiedRoleEligibilityScheduleInstance collection | Instances of eligible role assignments through Microsoft Entra Privileged Identity Management. |
| roleEligibilityScheduleRequests | unifiedRoleEligibilityScheduleRequest collection | Requests for eligible role assignments through Microsoft Entra Privileged Identity Management. |
| roleEligibilitySchedules | unifiedRoleEligibilitySchedule collection | Schedule for eligible role assignments through Microsoft Entra Privileged Identity Management. |
| transitiveRoleAssignments | unifiedRoleAssignment collection | Resource to grant access to users or groups that are transitive. |
JSON representation
None