roleManagement resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents a Microsoft 365 RBAC role management entity that provides access to role definitions and role assignments surfaced from various RBAC providers.

The unified role management API currently supports the following RBAC providers in Microsoft 365:

• Cloud PC
• device management (Intune)
• directory (Microsoft Entra directory roles)
• entitlement management (Microsoft Entra entitlement management)
• Exchange Online

For more information, see:

• Roles in Microsoft 365, Microsoft Entra, service-specific and cross-service roles
• Administrator role permissions in Microsoft Entra.
• Delegation and roles in Microsoft Entra entitlement management.
• Role-based access control (RBAC) with Microsoft Intune
• Understanding Role Based Access Control in Exchange Online

Methods

None.

Properties

None.

Relationships

Relationship	Type	Description
cloudPC	rbacApplicationMultiple	Provides access to role definitions and role assignments of a Cloud PC RBAC provider. Read-only. Nullable.
deviceManagement	rbacApplicationMultiple	Provides access to role definitions and role assignments of an Intune RBAC provider. Read-only. Nullable.
directory	rbacApplication	Provides access to role definitions and role assignments of a Microsoft Entra RBAC provider. Read-only. Nullable.
entitlementManagement	rbacApplication	Provides access to role definitions and role assignments of Microsoft Entra entitlement management. Read-only. Nullable.
exchange	unifiedRbacApplication	Provides access to role definitions and role assignments of Exchange providers. Read-only. Nullable.

JSON representation

None.