Get-AzureADServiceAppRoleAssignment

This article provides migration details from Get-AzureADServiceAppRoleAssignment command to Microsoft Graph PowerShell.

Summary

• Azure AD Command: Get-AzureADServiceAppRoleAssignment
• Azure AD Module: AzureAD
• Microsoft Graph Command: Get-MgServicePrincipalAppRoleAssignment (Community Examples)
• Graph Module: Microsoft.Graph.Applications
• Graph Endpoint: GET /servicePrincipals/{servicePrincipal-id}/appRoleAssignments

Permissions

Permission type	Least privileged permissions	Higher privileged permissions
Delegated (work or school account)	Application.Read.All	Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
Delegated (personal Microsoft account)	Not supported.	Not supported.
Application	Application.Read.All	Application.ReadWrite.All, Application.ReadWrite.OwnedBy, Directory.Read.All, Directory.ReadWrite.All

View more details on permissions.

Property Mapping

Azure AD Name	Microsoft Graph Name
All	All
ObjectId	ServicePrincipalId
Top	Top