Skip to content

New command: entra roledefinition add #6466

@MartinM85

Description

@MartinM85

Usage

m365 entra roledefinition add

Description

Creates a custom Microsoft Entra ID role definition

Options

Option Description
-n, --displayName <displayName> The display name for the role definition.
--allowedResourceActions <allowedResourceActions> Comma-separated list of resource actions allowed for the role.
--description [description] The description for the role definition.
--enabled [enabled] Indicates if the role is enabled for the assignment. If not specified, the role is enabled by default.
--version [version] The version of the role definition.

Examples

Create a custom Microsoft Entra ID role

m365 entra roledefinition add --displayName 'Application Remover' --description 'Allows to remove any Entra ID application' --allowedResourceActions 'microsoft.directory/applications/delete'

Create a custom Microsoft Entra ID role, but disable it for the assignment

m365 entra roledefinition add --displayName 'Application Remover' --version '1.0' --enabled false --allowedResourceActions 'microsoft.directory/applications/delete,microsoft.directory/applications/owners/update'

Default properties

No response

Additional Info

The command requires the permission RoleManagement.ReadWrite.Directory.

More info: https://learn.microsoft.com/en-us/graph/api/unifiedroledefinition-get?view=graph-rest-1.0&tabs=http#for-the-directory-microsoft-entra-id-provider

I will work on it

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions