New-MgDeviceManagementRoleDefinitionRoleAssignment
Create a new roleAssignment object.
Note
To view the beta release of this cmdlet, view New-MgBetaDeviceManagementRoleDefinitionRoleAssignment
Syntax
New-MgDeviceManagementRoleDefinitionRoleAssignment
-RoleDefinitionId <String>
[-ResponseHeadersVariable <String>]
[-AdditionalProperties <Hashtable>]
[-Description <String>]
[-DisplayName <String>]
[-Id <String>]
[-ResourceScopes <String[]>]
[-RoleDefinition <IMicrosoftGraphRoleDefinition>]
[-Headers <IDictionary>]
[-ProgressAction <ActionPreference>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
New-MgDeviceManagementRoleDefinitionRoleAssignment
-RoleDefinitionId <String>
-BodyParameter <IMicrosoftGraphRoleAssignment>
[-ResponseHeadersVariable <String>]
[-Headers <IDictionary>]
[-ProgressAction <ActionPreference>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
New-MgDeviceManagementRoleDefinitionRoleAssignment
-InputObject <IDeviceManagementAdministrationIdentity>
[-ResponseHeadersVariable <String>]
[-AdditionalProperties <Hashtable>]
[-Description <String>]
[-DisplayName <String>]
[-Id <String>]
[-ResourceScopes <String[]>]
[-RoleDefinition <IMicrosoftGraphRoleDefinition>]
[-Headers <IDictionary>]
[-ProgressAction <ActionPreference>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
New-MgDeviceManagementRoleDefinitionRoleAssignment
-InputObject <IDeviceManagementAdministrationIdentity>
-BodyParameter <IMicrosoftGraphRoleAssignment>
[-ResponseHeadersVariable <String>]
[-Headers <IDictionary>]
[-ProgressAction <ActionPreference>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Description
Create a new roleAssignment object.
Examples
Example 1: Code snippet
Import-Module Microsoft.Graph.DeviceManagement.Administration
$params = @{
"@odata.type" = "#microsoft.graph.roleAssignment"
displayName = "Display Name value"
description = "Description value"
resourceScopes = @(
"Resource Scopes value"
)
}
New-MgDeviceManagementRoleDefinitionRoleAssignment -RoleDefinitionId $roleDefinitionId -BodyParameter $params
This example shows how to use the New-MgDeviceManagementRoleDefinitionRoleAssignment Cmdlet.
Parameters
-AdditionalProperties
Additional Parameters
Type: | Hashtable |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-BodyParameter
The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles. To construct, see NOTES section for BODYPARAMETER properties and create a hash table.
Type: | IMicrosoftGraphRoleAssignment |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-Confirm
Prompts you for confirmation before running the cmdlet.
Type: | SwitchParameter |
Aliases: | cf |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Description
Description of the Role Assignment.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-DisplayName
The display or friendly name of the role Assignment.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Headers
Optional headers that will be added to the request.
Type: | IDictionary |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-Id
The unique identifier for an entity. Read-only.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-InputObject
Identity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.
Type: | IDeviceManagementAdministrationIdentity |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-ProgressAction
{{ Fill ProgressAction Description }}
Type: | ActionPreference |
Aliases: | proga |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-ResourceScopes
List of ids of role scope member security groups. These are IDs from Azure Active Directory.
Type: | String[] |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-ResponseHeadersVariable
Optional Response Headers Variable.
Type: | String |
Aliases: | RHV |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-RoleDefinition
The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role. To construct, see NOTES section for ROLEDEFINITION properties and create a hash table.
Type: | IMicrosoftGraphRoleDefinition |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-RoleDefinitionId
The unique identifier of roleDefinition
Type: | String |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Type: | SwitchParameter |
Aliases: | wi |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Inputs
Microsoft.Graph.PowerShell.Models.IDeviceManagementAdministrationIdentity
Microsoft.Graph.PowerShell.Models.IMicrosoftGraphRoleAssignment
System.Collections.IDictionary
Outputs
Microsoft.Graph.PowerShell.Models.IMicrosoftGraphRoleAssignment
Notes
COMPLEX PARAMETER PROPERTIES
To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.
BODYPARAMETER <IMicrosoftGraphRoleAssignment>
: The Role Assignment resource.
Role assignments tie together a role definition with members and scopes.
There can be one or more role assignments per role.
This applies to custom and built-in roles.
[(Any) <Object>]
: This indicates any property can be added to this object.[Id <String>]
: The unique identifier for an entity. Read-only.[Description <String>]
: Description of the Role Assignment.[DisplayName <String>]
: The display or friendly name of the role Assignment.[ResourceScopes <String-
[]>]
: List of ids of role scope member security groups. These are IDs from Azure Active Directory.[RoleDefinition <IMicrosoftGraphRoleDefinition>]
: The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role.[(Any) <Object>]
: This indicates any property can be added to this object.[Id <String>]
: The unique identifier for an entity. Read-only.[Description <String>]
: Description of the Role definition.[DisplayName <String>]
: Display Name of the Role definition.[IsBuiltIn <Boolean?>]
: Type of Role. Set to True if it is built-in, or set to False if it is a custom role definition.[RoleAssignments <IMicrosoftGraphRoleAssignment-
[]>]
: List of Role assignments for this role definition.[RolePermissions <IMicrosoftGraphRolePermission-
[]>]
: List of Role Permissions this role is allowed to perform. These must match the actionName that is defined as part of the rolePermission.[ResourceActions <IMicrosoftGraphResourceAction-
[]>]
: Resource Actions each containing a set of allowed and not allowed permissions.[AllowedResourceActions <String-
[]>]
: Allowed Actions[NotAllowedResourceActions <String-
[]>]
: Not Allowed Actions.
INPUTOBJECT <IDeviceManagementAdministrationIdentity>
: Identity Parameter
[AuditEventId <String>]
: The unique identifier of auditEvent[CloudPcAuditEventId <String>]
: The unique identifier of cloudPcAuditEvent[CloudPcDeviceImageId <String>]
: The unique identifier of cloudPcDeviceImage[CloudPcGalleryImageId <String>]
: The unique identifier of cloudPcGalleryImage[CloudPcId <String>]
: The unique identifier of cloudPC[CloudPcOnPremisesConnectionId <String>]
: The unique identifier of cloudPcOnPremisesConnection[CloudPcProvisioningPolicyAssignmentId <String>]
: The unique identifier of cloudPcProvisioningPolicyAssignment[CloudPcProvisioningPolicyId <String>]
: The unique identifier of cloudPcProvisioningPolicy[CloudPcUserSettingAssignmentId <String>]
: The unique identifier of cloudPcUserSettingAssignment[CloudPcUserSettingId <String>]
: The unique identifier of cloudPcUserSetting[ComplianceManagementPartnerId <String>]
: The unique identifier of complianceManagementPartner[DeviceAndAppManagementRoleAssignmentId <String>]
: The unique identifier of deviceAndAppManagementRoleAssignment[DeviceManagementExchangeConnectorId <String>]
: The unique identifier of deviceManagementExchangeConnector[DeviceManagementPartnerId <String>]
: The unique identifier of deviceManagementPartner[IosUpdateDeviceStatusId <String>]
: The unique identifier of iosUpdateDeviceStatus[MobileThreatDefenseConnectorId <String>]
: The unique identifier of mobileThreatDefenseConnector[RemoteAssistancePartnerId <String>]
: The unique identifier of remoteAssistancePartner[ResourceOperationId <String>]
: The unique identifier of resourceOperation[RoleAssignmentId <String>]
: The unique identifier of roleAssignment[RoleDefinitionId <String>]
: The unique identifier of roleDefinition[TelecomExpenseManagementPartnerId <String>]
: The unique identifier of telecomExpenseManagementPartner[TermsAndConditionsAcceptanceStatusId <String>]
: The unique identifier of termsAndConditionsAcceptanceStatus[TermsAndConditionsAssignmentId <String>]
: The unique identifier of termsAndConditionsAssignment[TermsAndConditionsId <String>]
: The unique identifier of termsAndConditions[UserId <String>]
: The unique identifier of user
ROLEDEFINITION <IMicrosoftGraphRoleDefinition>
: The Role Definition resource.
The role definition is the foundation of role based access in Intune.
The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource.
There are two types of roles, built-in and custom.
Built-in roles cannot be modified.
Both built-in roles and custom roles must have assignments to be enforced.
Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role.
[(Any) <Object>]
: This indicates any property can be added to this object.[Id <String>]
: The unique identifier for an entity. Read-only.[Description <String>]
: Description of the Role definition.[DisplayName <String>]
: Display Name of the Role definition.[IsBuiltIn <Boolean?>]
: Type of Role. Set to True if it is built-in, or set to False if it is a custom role definition.[RoleAssignments <IMicrosoftGraphRoleAssignment-
[]>]
: List of Role assignments for this role definition.[Id <String>]
: The unique identifier for an entity. Read-only.[Description <String>]
: Description of the Role Assignment.[DisplayName <String>]
: The display or friendly name of the role Assignment.[ResourceScopes <String-
[]>]
: List of ids of role scope member security groups. These are IDs from Azure Active Directory.[RoleDefinition <IMicrosoftGraphRoleDefinition>]
: The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role.
[RolePermissions <IMicrosoftGraphRolePermission-
[]>]
: List of Role Permissions this role is allowed to perform. These must match the actionName that is defined as part of the rolePermission.[ResourceActions <IMicrosoftGraphResourceAction-
[]>]
: Resource Actions each containing a set of allowed and not allowed permissions.[AllowedResourceActions <String-
[]>]
: Allowed Actions[NotAllowedResourceActions <String-
[]>]
: Not Allowed Actions.