Get RoleAssignments from Graph for GCCH Azure tenant fails on Searches against this resource are not supported

Idan Greenberg 0 Reputation points


I'm trying to run this query on a GCCH Azure tenants:

and fail on 'Searches against this resource are not supported. Only specific instances can be queried.'

Only when I add filtering like:

$filter=roledefinitionid eq '88d8e3e3-8f55-4a1e-953a-9b9898b8876b'

the call succeeds.

Is it a known issue ?

Are there any similar known limitations with Graph on GCCH ?


Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,038 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
696 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,079 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 35,541 Reputation points Microsoft Employee

    Hi @Idan Greenberg ,

    This is by design. /RoleAssignments requires the $filter parameter. This is documented here: List unifiedRoleAssignments - Microsoft Graph beta | Microsoft Learn

    If you would like to leave feedback to enhance the Graph querying, you can leave it in the feedback forum.

    If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.

    0 comments No comments