How to use REST API to extract role assignment information from a Azure Purview account?

Question

How to use REST API to extract role assignment information from a Azure Purview account?

Jesse Yang 1

I want to obtain role assignment information from Azure Purview instances using REST API calls in my application. The desired information is the email addresses and groups under each role as indicated by the red arrows in the image at the end.

I have tried to follow the Microsoft doc (link) and tried the API below.

GET {Endpoint}/policyStore/metadataRoles?api-version=2021-07-01-preview

However, I could only get the default metadata roles in the response, such as

purviewmetadatarole_builtin_data-source-administrator

I am new to Purview, so please forgive me if this is a silly question. Is there an API that can properly extract role assignment information?

PRADEEPCHEEKATLA 90,596 Reputation points

2022-04-13T08:03:46.437+00:00
Hello @Jesse Yang ,

Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

------------------------------

Please don't forget to click on or upvote button whenever the information provided helps you.

1 answer

Your answer

PRADEEPCHEEKATLA 90,596 Reputation points

2022-04-13T08:03:46.437+00:00

Hello @Jesse Yang ,

Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

------------------------------

Please don't forget to click on or upvote button whenever the information provided helps you.

Answer 1

PRADEEPCHEEKATLA 90,596

Hello @Jesse Yang ,

Thanks for the question and using MS Q&A platform.

Metadata Roles – List REST API returns the list roles for Azure Purview Account.

Metadata Policy - List All REST API returns the list or Get metadata polices for Azure Purview Account.

Note: This attribute Value will be Object ID of the user/app registered in the Azure Active Directory.

Metadata Policy - Get REST API returns Gets a metadata policy for Azure Purview Account.

Note: Make sure to replace the {policyId} with the above value.

Hope this will help. Please let us know if any further queries.

------------------------------

Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
Want a reminder to come back and check responses? Here is how to subscribe to a notification
If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators

PRADEEPCHEEKATLA 90,596 Reputation points

2022-04-18T05:51:45.627+00:00

Hello @Jesse Yang ,

Just checking in to see if the above answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
Jesse Yang 1 Reputation point

2022-04-20T03:56:55.52+00:00

Hi PRADEEPCHEEKATLA-MSFT,

Thank you so much for answering the question. I tried the api you provided, and it worked. However, I could only get the object IDs of the service principals, groups and users, instead of their names. I used the api by following this document: https://learn.microsoft.com/en-us/graph/api/directoryobject-getbyids?view=graph-rest-1.0&tabs=http

However, I was not able to authenticate and got errors. Could you please enlighten me on how I can give the api call the proper permission to get the names?

Thanks a lot in advance.
PRADEEPCHEEKATLA 90,596 Reputation points

2022-04-20T06:42:48.883+00:00

Hello @Jesse Yang ,

As I said above post, it returns attribute Value will be Object ID of the user/app registered in the Azure Active Directory.
Jesse Yang 1 Reputation point

2022-04-20T18:12:15.973+00:00

Yes, I understand. I want to know how I can turn Object IDs into names. How can give the getByIds api call the proper permission to get the names?
PRADEEPCHEEKATLA 90,596 Reputation points

2022-04-22T03:49:17.37+00:00

Hello @Jesse Yang ,

We are reaching out to the internal team to get the more details on this ask. I will be update you once I hear back from the team.
Rob Sharpe 20 Reputation points

2024-05-29T09:16:53.3433333+00:00
@PRADEEPCHEEKATLA in your screen shots above, what UI are you using as it looks very handy ?

Share via

How to use REST API to extract role assignment information from a Azure Purview account?

1 answer

Your answer