Get-AzureADUserAppRoleAssignment

This article provides migration details from Get-AzureADUserAppRoleAssignment command to Microsoft Graph PowerShell.

Summary

• Azure AD Command: Get-AzureADUserAppRoleAssignment
• Azure AD Module: AzureAD
• Microsoft Graph Command: Get-MgUserAppRoleAssignment (Community Examples)
• Graph Module: Microsoft.Graph.Applications
• Graph Endpoint: GET /users/{user-id}/appRoleAssignments | /users/{user-id}/appRoleAssignments/{appRoleAssignment-id}

Permissions

Permission type	Least privileged permissions	Higher privileged permissions
Delegated (work or school account)	AppRoleAssignment.ReadWrite.All	Directory.Read.All
Delegated (personal Microsoft account)	Not supported.	Not supported.
Application	Directory.Read.All	AppRoleAssignment.ReadWrite.All

View more details on permissions.

Property Mapping

Azure AD Name	Microsoft Graph Name
ObjectId	UserId