Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,798 questions
how to retrieve "MembershipRule" for Azure access package policies using MS Graph API SDK Powershell
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 90%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESV%3C/text%3E%3C/svg%3E)
Satyam Valipe
0
Reputation points
In our Azure environment, we've access packages being provisioned via auto-assignment policies. (Ex: Department="Sales") I was looking for a way to retrieve each access package auto-assignment policy criteria using Powershell MS Graph API SDK. From what I could tell so far, it seems like the info I am looking for is stored in "MembershipRule" attribute of the policy but couldn't find a correct API function that returns it. I have tried the following API so far with no luck. Any input would be much appreciated! Get-MgEntitlementManagementAccessPackage -ExpandProperty "assignmentpolicies" Get-MgBetaEntitlementManagementAccessPackageAssignmentPolicy -AccessPackageAssignmentPolicyId $policy.Id
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 7.000000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC3%3C/text%3E%3C/svg%3E)
Carolyne-3676 211 Reputation points2024-03-12T13:23:35.36+00:00 Hello @Satyam Valipe ! Thanks for raising this question on the platform. Have you had a look at this documentation https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-access-package-assignments#view-assignments-programmatically
What info are you specifically looking for? The MembershipRule is what determines how the policy is applied. For example membershipRule = '(user.department -eq "Marketing")' will assign policy to people in Marketing. Is this what you are targeting?
Sign in to comment
Sign in to answer