# Microsoft Entra ID (formerly Azure AD) Identity Governance.privileged Access Root API

**Canonical:** https://apis.io/apis/azure-ad/azure-ad-identitygovernance-privilegedaccessroot-api/  
**Provider:** Microsoft Entra ID (formerly Azure AD) — https://apis.io/providers/azure-ad/  
**Base URL:** https://login.microsoftonline.com  
**Documentation:** https://learn.microsoft.com/en-us/azure/active-directory-b2c/

Microsoft Entra ID (formerly Azure AD) Identity Governance.privileged Access Root API is one of 186 APIs that [Microsoft Entra ID (formerly Azure AD)](https://apis.io/providers/azure-ad/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, authentication docs, and a changelog.

The identityGovernance.privilegedAccessRoot API from Microsoft Entra ID (formerly Azure AD) — 64 operation(s) for identitygovernance.privilegedaccessroot.

## Operations (60 of 92)

| Method | Path | Summary |
|---|---|---|
| GET | `/identityGovernance/privilegedAccess` | Get privilegedAccess from identityGovernance |
| PATCH | `/identityGovernance/privilegedAccess` | Update the navigation property privilegedAccess in identityGovernance |
| DELETE | `/identityGovernance/privilegedAccess` | Delete navigation property privilegedAccess for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group` | Get group from identityGovernance |
| PATCH | `/identityGovernance/privilegedAccess/group` | Update the navigation property group in identityGovernance |
| DELETE | `/identityGovernance/privilegedAccess/group` | Delete navigation property group for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentApprovals` | Get assignmentApprovals from identityGovernance |
| POST | `/identityGovernance/privilegedAccess/group/assignmentApprovals` | Create new navigation property to assignmentApprovals for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}` | Get assignmentApprovals from identityGovernance |
| PATCH | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}` | Update the navigation property assignmentApprovals in identityGovernance |
| DELETE | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}` | Delete navigation property assignmentApprovals for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}/stages` | Get stages from identityGovernance |
| POST | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}/stages` | Create new navigation property to stages for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}/stages/{approvalStage-id}` | Get stages from identityGovernance |
| PATCH | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}/stages/{approvalStage-id}` | Update the navigation property stages in identityGovernance |
| DELETE | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}/stages/{approvalStage-id}` | Delete navigation property stages for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentApprovals/{approval-id}/stages/$count` | Get the number of the resource |
| GET | `/identityGovernance/privilegedAccess/group/assignmentApprovals/$count` | Get the number of the resource |
| GET | `/identityGovernance/privilegedAccess/group/assignmentApprovals/microsoft.graph.filterByCurrentUser(on='{on}')` | Invoke function filterByCurrentUser |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances` | List assignmentScheduleInstances |
| POST | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances` | Create new navigation property to assignmentScheduleInstances for… |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}` | Get privilegedAccessGroupAssignmentScheduleInstance |
| PATCH | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}` | Update the navigation property assignmentScheduleInstances in identityGovernance |
| DELETE | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}` | Delete navigation property assignmentScheduleInstances for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}/activatedUsing` | Get activatedUsing from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}/group` | Get group from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}/group/serviceProvisioningErrors` | Get serviceProvisioningErrors property value |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}/group/serviceProvisioningErrors/$count` | Get the number of the resource |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{privilegedAccessGroupAssignmentScheduleInstance-id}/principal` | Get principal from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/$count` | Get the number of the resource |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/microsoft.graph.filterByCurrentUser(on='{on}')` | Invoke function filterByCurrentUser |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests` | List assignmentScheduleRequests |
| POST | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests` | Create assignmentScheduleRequest |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}` | Get privilegedAccessGroupAssignmentScheduleRequest |
| PATCH | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}` | Update the navigation property assignmentScheduleRequests in identityGovernance |
| DELETE | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}` | Delete navigation property assignmentScheduleRequests for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}/activatedUsing` | Get activatedUsing from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}/group` | Get group from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}/group/serviceProvisioningErrors` | Get serviceProvisioningErrors property value |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}/group/serviceProvisioningErrors/$count` | Get the number of the resource |
| POST | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}/microsoft.graph.cancel` | Invoke action cancel |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}/principal` | Get principal from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{privilegedAccessGroupAssignmentScheduleRequest-id}/targetSchedule` | Get targetSchedule from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/$count` | Get the number of the resource |
| GET | `/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/microsoft.graph.filterByCurrentUser(on='{on}')` | Invoke function filterByCurrentUser |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules` | List assignmentSchedules |
| POST | `/identityGovernance/privilegedAccess/group/assignmentSchedules` | Create new navigation property to assignmentSchedules for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}` | Get privilegedAccessGroupAssignmentSchedule |
| PATCH | `/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}` | Update the navigation property assignmentSchedules in identityGovernance |
| DELETE | `/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}` | Delete navigation property assignmentSchedules for identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}/activatedUsing` | Get activatedUsing from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}/group` | Get group from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}/group/serviceProvisioningErrors` | Get serviceProvisioningErrors property value |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}/group/serviceProvisioningErrors/$count` | Get the number of the resource |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules/{privilegedAccessGroupAssignmentSchedule-id}/principal` | Get principal from identityGovernance |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules/$count` | Get the number of the resource |
| GET | `/identityGovernance/privilegedAccess/group/assignmentSchedules/microsoft.graph.filterByCurrentUser(on='{on}')` | Invoke function filterByCurrentUser |
| GET | `/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances` | List eligibilityScheduleInstances |
| POST | `/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances` | Create new navigation property to eligibilityScheduleInstances for… |
| GET | `/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances/{privilegedAccessGroupEligibilityScheduleInstance-id}` | Get privilegedAccessGroupEligibilityScheduleInstance |

…and 32 more operations. They are listed in full on the page.

## Machine-readable artifacts (7)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identitygovernance-privilegedaccessroot-api-openapi.yml
- **Documentation** — https://learn.microsoft.com/en-us/graph/api/overview
- **Authentication** — https://learn.microsoft.com/en-us/graph/auth/
- **SDKs** — https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
- **ChangeLog** — https://developer.microsoft.com/en-us/graph/changelog
- **Webhooks** — https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml
- **Documentation** — https://learn.microsoft.com/en-us/graph/change-notifications-overview

## Other Microsoft Entra ID (formerly Azure AD) APIs (12)

- [Azure AD B2C API](https://apis.io/apis/azure-ad/azure-ad-b2c-api/)
- [Microsoft Entra ID (formerly Azure AD) Admin.people Admin Settings API](https://apis.io/apis/azure-ad/azure-ad-admin-peopleadminsettings-api/)
- [Microsoft Entra ID (formerly Azure AD) Agreements.agreement API](https://apis.io/apis/azure-ad/azure-ad-agreements-agreement-api/)
- [Microsoft Entra ID (formerly Azure AD) Agreements.agreement Acceptance API](https://apis.io/apis/azure-ad/azure-ad-agreements-agreementacceptance-api/)
- [Microsoft Entra ID (formerly Azure AD) Agreements.agreement File API](https://apis.io/apis/azure-ad/azure-ad-agreements-agreementfile-api/)
- [Microsoft Entra ID (formerly Azure AD) Agreements.agreement File Localization API](https://apis.io/apis/azure-ad/azure-ad-agreements-agreementfilelocalization-api/)
- [Microsoft Entra ID (formerly Azure AD) Applications API](https://apis.io/apis/azure-ad/azure-ad-applications-api/)
- [Microsoft Entra ID (formerly Azure AD) Applications.application.Actions API](https://apis.io/apis/azure-ad/azure-ad-applications-application-actions-api/)
- [Microsoft Entra ID (formerly Azure AD) Applications.application API](https://apis.io/apis/azure-ad/azure-ad-applications-application-api/)
- [Microsoft Entra ID (formerly Azure AD) Applications.application.Functions API](https://apis.io/apis/azure-ad/azure-ad-applications-application-functions-api/)
- [Microsoft Entra ID (formerly Azure AD) Applications.app Management Policy API](https://apis.io/apis/azure-ad/azure-ad-applications-appmanagementpolicy-api/)
- [Microsoft Entra ID (formerly Azure AD) Applications.directory Object API](https://apis.io/apis/azure-ad/azure-ad-applications-directoryobject-api/)

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/azure-ad/azure-ad-identitygovernance-privilegedaccessroot-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/azure-ad/.
