Delete inheritablePermission

Namespace: microsoft.graph

Delete an inheritablePermission object from an agent identity blueprint. When a permission is deleted, agent identities created from the blueprint will no longer automatically inherit the delegated permission scopes defined in the deleted inheritablePermission object. If the agent identity requires those scopes, they must request consent again.

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

Permission type	Least privileged permission	Higher privileged permissions
Delegated (work or school account)	AgentIdentityBlueprint.ReadWrite.All	Not available
Delegated (personal Microsoft account)	Not supported.	Not supported.
Application	AgentIdentityBlueprint.ReadWrite.All	Not available

Important

• A principal who creates an agent identity blueprint or blueprint principal is automatically assigned as the owner.
• Owners can create and modify agent identities associated with a blueprint they own without being assigned an Agent ID role.
• For nonowners to call this API in delegated scenarios using work or school accounts, the admin must be assigned a supported Microsoft Entra role. This operation supports the following least-privileged built-in role:
  • Agent ID Administrator

HTTP request

DELETE /applications/{id}/microsoft.graph.agentIdentityBlueprint/inheritablePermissions/{resourceAppId}

Request headers

Name	Description
Authorization	Bearer {token}. Required. Learn more about authentication and authorization.

Request body

Don't supply a request body for this method.

Response

If successful, this method returns a 204 No Content response code.

Examples

Request

The following example shows a request.

HTTP

DELETE https://graph.microsoft.com/v1.0/applications/bc057821-f236-49d6-9f2c-1ebf43e9437a/microsoft.graph.agentIdentityBlueprint/inheritablePermissions/00000002-0000-0000-c000-000000000000

JavaScript

const options = {
	authProvider,
};

const client = Client.init(options);

await client.api('/applications/bc057821-f236-49d6-9f2c-1ebf43e9437a/microsoft.graph.agentIdentityBlueprint/inheritablePermissions/00000002-0000-0000-c000-000000000000')
	.delete();

For details about how to add the SDK to your project and create an authProvider instance, see the SDK documentation.

Response

The following example shows the response.

HTTP/1.1 204 No Content