Skip to content

Enhancement: m365 aad approleassignment list should query a different endpoint #2462

Description

@plamber

Description

The current m365 aad approleassignment list queries the approle assignments by performing an expand operation on the serviceprinciapals endpoint. This operation returns a limited set of properties of the app role assignments.

When looking at the sample request #2439 we might benefit by changing this command in a way to call the "https://graph.microsoft.com/v1.0/servicePrincipals/$($sp.id)/appRoleAssignments" endpoint instead to return a richer set of properties.

This will require the script to query the service principal first and then the approleassignments separately.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions