Get-AzureADDirectoryRole

This article provides migration details from Get-AzureADDirectoryRole command to Microsoft Graph PowerShell.

Summary

Permissions

Permission type Least privileged permissions Higher privileged permissions
Delegated (work or school account) RoleManagement.Read.Directory Directory.Read.All, Directory.ReadWrite.All, RoleManagement.ReadWrite.Directory
Delegated (personal Microsoft account) Not supported. Not supported.
Application RoleManagement.Read.Directory Directory.Read.All, Directory.ReadWrite.All, RoleManagement.ReadWrite.Directory

View more details on permissions.

Property Mapping

Azure AD Name Microsoft Graph Name
Filter Filter
ObjectId DirectoryRoleId