Get RoleAssignments from Graph for GCCH Azure tenant fails on Searches against this resource are not supported

Idan Greenberg 0 Reputation points
2023-11-05T22:06:03.8433333+00:00

Hi,

I'm trying to run this query on a GCCH Azure tenants:

https://graph.microsoft.com/beta/RoleManagement/Directory/RoleAssignments

and fail on 'Searches against this resource are not supported. Only specific instances can be queried.'

Only when I add filtering like:

$filter=roledefinitionid eq '88d8e3e3-8f55-4a1e-953a-9b9898b8876b'

the call succeeds.

Is it a known issue ?

Are there any similar known limitations with Graph on GCCH ?

Thanks

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,038 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
696 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,079 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 35,541 Reputation points Microsoft Employee
    2023-11-16T19:20:42.42+00:00

    Hi @Idan Greenberg ,

    This is by design. /RoleAssignments requires the $filter parameter. This is documented here: List unifiedRoleAssignments - Microsoft Graph beta | Microsoft Learn

    If you would like to leave feedback to enhance the Graph querying, you can leave it in the feedback forum. https://feedback.azure.com/

    If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.

    0 comments No comments