Update roleScopeTagAutoAssignment
Namespace: microsoft.graph
Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.
Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.
Update the properties of a roleScopeTagAutoAssignment object.
This API is available in the following national cloud deployments.
Global service | US Government L4 | US Government L5 (DOD) | China operated by 21Vianet |
---|---|---|---|
✅ | ✅ | ✅ | ✅ |
Permissions
One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.
Permission type | Permissions (from least to most privileged) |
---|---|
Delegated (work or school account) | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementRBAC.ReadWrite.All |
Delegated (personal Microsoft account) | Not supported. |
Application | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementRBAC.ReadWrite.All |
HTTP Request
PATCH /deviceManagement/roleDefinitions/{roleDefinitionId}/roleAssignments/{roleAssignmentId}/microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTags/{roleScopeTagId}/assignments/{roleScopeTagAutoAssignmentId}
Request headers
Header | Value |
---|---|
Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
Accept | application/json |
Request body
In the request body, supply a JSON representation for the roleScopeTagAutoAssignment object.
The following table shows the properties that are required when you create the roleScopeTagAutoAssignment.
Property | Type | Description |
---|---|---|
id | String | Key of the entity. This property is read-only. |
target | deviceAndAppManagementAssignmentTarget | The auto-assignment target for the specific Role Scope Tag. |
Response
If successful, this method returns a 200 OK
response code and an updated roleScopeTagAutoAssignment object in the response body.
Example
Request
Here is an example of the request.
PATCH https://graph.microsoft.com/beta/deviceManagement/roleDefinitions/{roleDefinitionId}/roleAssignments/{roleAssignmentId}/microsoft.graph.deviceAndAppManagementRoleAssignment/roleScopeTags/{roleScopeTagId}/assignments/{roleScopeTagAutoAssignmentId}
Content-type: application/json
Content-length: 398
{
"@odata.type": "#microsoft.graph.roleScopeTagAutoAssignment",
"target": {
"@odata.type": "microsoft.graph.scopeTagGroupAssignmentTarget",
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value",
"deviceAndAppManagementAssignmentFilterType": "include",
"targetType": "user",
"entraObjectId": "Entra Object Id value"
}
}
Response
Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 447
{
"@odata.type": "#microsoft.graph.roleScopeTagAutoAssignment",
"id": "256e6375-6375-256e-7563-6e2575636e25",
"target": {
"@odata.type": "microsoft.graph.scopeTagGroupAssignmentTarget",
"deviceAndAppManagementAssignmentFilterId": "Device And App Management Assignment Filter Id value",
"deviceAndAppManagementAssignmentFilterType": "include",
"targetType": "user",
"entraObjectId": "Entra Object Id value"
}
}