How to see the permission of a user A and copy the same permission for user B in Azure AD

Question

I have a user A in Azure AD portal. I have been asked to assign same permission to B and C as user A has.

How can I see the role and resource permission of user A and grant to B and C.

We are using PIM groups so user A may have ID level permission or maybe his permission is coming because of some group membership. I want to exactly copy A permission to B and C

Answer 1

Hi @Mohd Arif ,

I understand you are trying to assign the same permission from one user to another.

To get the permissions assigned to user A, you can leverage Graph API endpoint

GET /roleManagement/directory/transitiveRoleAssignments?$filter=principalId eq '{principalId}'

to get the list of direct and transitive objects (If a user is assigned an Azure AD role through group membership) for a specific principal and this request will list the group's ID as the principalId otherwise principalId is user's object id**.**

Here roleDefinitionId are the roles assign to the user.

Reference: https://learn.microsoft.com/en-us/graph/api/rbacapplication-list-transitiveroleassignments?view=graph-rest-beta&tabs=http

You can check the role name using

https://graph.microsoft.com/beta/roleManagement/directory/roleDefinitions

and assign the same roles to another users using

https://learn.microsoft.com/en-us/azure/active-directory/roles/manage-roles-portal#microsoft-graph-api

https://learn.microsoft.com/en-us/azure/active-directory/roles/groups-assign-role?tabs=ms-powershell#microsoft-graph-api

Hope this will help.

Thanks,

Shweta

---

Please remember to "Accept Answer" if answer helped you.

Answer 2

Hello there,

You can use the Microsoft Power Automate template to get this done.

Click a button to copy a user's Azure AD security group permissions to another user in order to automate employee onboarding processes by replicating user permissions for team members with similar access requirements. Once the permissions have been replicated, the requester will receive a confirmation email.

You can try it from here https://powerautomate.microsoft.com/en-US/templates/details/06dd6993013c44b58782adde083448aa/click-a-button-to-copy-azure-ad-user-permissions-to-another-user/

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–

Answer 3

I do not have any experience using MS Graph. Is there any way to do it using AAD console portal.azure.com??