Skip to content

Enhancement: m365 aad approleassignment list should query a different endpoint #2462

@plamber

Description

@plamber

Description

The current m365 aad approleassignment list queries the approle assignments by performing an expand operation on the serviceprinciapals endpoint. This operation returns a limited set of properties of the app role assignments.

When looking at the sample request #2439 we might benefit by changing this command in a way to call the "https://graph.microsoft.com/v1.0/servicePrincipals/$($sp.id)/appRoleAssignments" endpoint instead to return a richer set of properties.

This will require the script to query the service principal first and then the approleassignments separately.

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions