Get-AzureADServiceAppRoleAssignedTo
This article provides migration details from Get-AzureADServiceAppRoleAssignedTo command to Microsoft Graph PowerShell.
Summary
- Azure AD Command: Get-AzureADServiceAppRoleAssignedTo
- Azure AD Module: AzureAD
- Microsoft Graph Command: Get-MgServicePrincipalAppRoleAssignedTo (Community Examples)
- Graph Module: Microsoft.Graph.Applications
- Graph Endpoint: GET /servicePrincipals/{servicePrincipal-id}/appRoleAssignedTo | /servicePrincipals/{servicePrincipal-id}/appRoleAssignedTo/{appRoleAssignment-id}
Permissions
Permission type | Least privileged permissions | Higher privileged permissions |
---|---|---|
Delegated (work or school account) | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All |
Delegated (personal Microsoft account) | Not supported. | Not supported. |
Application | Application.Read.All | Application.ReadWrite.All, Application.ReadWrite.OwnedBy, Directory.Read.All, Directory.ReadWrite.All |
View more details on permissions.
Property Mapping
Azure AD Name | Microsoft Graph Name |
---|---|
All | All |
ObjectId | ServicePrincipalId |
Top | Top |