how to retrieve "MembershipRule" for Azure access package policies using MS Graph API SDK Powershell

Question

how to retrieve "MembershipRule" for Azure access package policies using MS Graph API SDK Powershell

Satyam Valipe 0

In our Azure environment, we've access packages being provisioned via auto-assignment policies. (Ex: Department="Sales") I was looking for a way to retrieve each access package auto-assignment policy criteria using Powershell MS Graph API SDK. From what I could tell so far, it seems like the info I am looking for is stored in "MembershipRule" attribute of the policy but couldn't find a correct API function that returns it. I have tried the following API so far with no luck. Any input would be much appreciated! Get-MgEntitlementManagementAccessPackage -ExpandProperty "assignmentpolicies" Get-MgBetaEntitlementManagementAccessPackageAssignmentPolicy -AccessPackageAssignmentPolicyId $policy.Id

Carolyne-3676 1,136 Reputation points

2024-03-12T13:23:35.36+00:00

Hello @Satyam Valipe ! Thanks for raising this question on the platform. Have you had a look at this documentation https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-access-package-assignments#view-assignments-programmatically
What info are you specifically looking for? The MembershipRule is what determines how the policy is applied. For example membershipRule = '(user.department -eq "Marketing")' will assign policy to people in Marketing. Is this what you are targeting?