Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Policies.unified Role Management Policy API

The policies.unifiedRoleManagementPolicy API from Microsoft Entra ID (formerly Azure AD) — 9 operation(s) for policies.unifiedrolemanagementpolicy.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 18

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /policies/roleManagementPolicies List PIM role management policies · List roleManagementPolicies #
Ask an LLM
“Which PIM policies apply to Microsoft Entra roles or group membership in my tenant?”
“Can I filter role management policies by scope?”
Tell an agent
List all PIM role management policies.
Show role management policies where {filter}.
POST /policies/roleManagementPolicies Create a role management policy · Create new navigation property to roleManagementPolicies for policies #
Ask an LLM
“Is it possible to add a new role management policy for a scope?”
“What fields go into a new PIM policy, like scope ID and scope type?”
Tell an agent
Create a role management policy named {displayName} for scope {scopeId} of type {scopeType}.
Add a new PIM policy described as {description}.
GET /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id} Get one role management policy · Get unifiedRoleManagementPolicy #
Ask an LLM
“What are the details of a specific PIM role management policy?”
“Can I read one policy together with its rules expanded?”
Tell an agent
Get role management policy {policy}.
Show policy {policy} with {expand} expanded.
PATCH /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id} Update a role management policy · Update the navigation property roleManagementPolicies in policies #
Ask an LLM
“How do I rename or re-describe an existing PIM policy?”
“Can I change whether a role management policy is the organization default?”
Tell an agent
Rename role management policy {policy} to {displayName}.
Set isOrganizationDefault to {isOrganizationDefault} on PIM policy {policy}.
DELETE /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id} Delete a role management policy · Delete navigation property roleManagementPolicies for policies #
Ask an LLM
“Can I delete a role management policy I created?”
“What happens when a PIM policy is removed from policies?”
Tell an agent destructive · confirm first
Delete role management policy {policy}.
Remove the PIM policy with ID {policy}.
GET /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/effectiveRules List a policy's effective rules · Get effectiveRules from policies #
Ask an LLM
“Which approval and expiration rules actually take effect after inherited tenant-wide rules are applied?”
“Why is approval enforced even though my policy disables it?”
Tell an agent
List the effective rules for role management policy {policy}.
Show the evaluated effective rules on PIM policy {policy} matching {filter}.
POST /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/effectiveRules Add an effective rule to a policy · Create new navigation property to effectiveRules for policies #
Ask an LLM
“Can I create an effective rule entry on a role management policy?”
“What does a new effective rule need besides its target?”
Tell an agent
Add an effective rule with target {target} to policy {policy}.
Create effective rule {ruleId} on role management policy {policy}.
GET /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/effectiveRules/{unifiedRoleManagementPolicyRule-id} Get one effective rule of a policy · Get effectiveRules from policies #
Ask an LLM
“What is the effective, inheritance-evaluated value of one specific rule on a PIM policy?”
“Is a particular expiration rule effectively enabled after tenant-wide settings?”
Tell an agent
Get effective rule {rule} on role management policy {policy}.
Show how rule {rule} is evaluated in effect for PIM policy {policy}.
PATCH /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/effectiveRules/{unifiedRoleManagementPolicyRule-id} Update an effective rule on a policy · Update the navigation property effectiveRules in policies #
Ask an LLM
“Can I change the target of an effective rule on a PIM policy?”
“Is patching an effective rule entry supported?”
Tell an agent
Set the target of effective rule {rule} on policy {policy} to {target}.
Patch effective rule {rule} in role management policy {policy}.
DELETE /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/effectiveRules/{unifiedRoleManagementPolicyRule-id} Delete an effective rule from a policy · Delete navigation property effectiveRules for policies #
Ask an LLM
“Can an effective rule be deleted from a role management policy?”
“Is it possible to drop one entry from a policy's effective rules collection?”
Tell an agent destructive · confirm first
Delete effective rule {rule} from role management policy {policy}.
Remove {rule} from the effective rules of PIM policy {policy}.
GET /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/effectiveRules/$count Count a policy's effective rules · Get the number of the resource #
Ask an LLM
“How many effective rules does a role management policy have?”
“Can I get a total of effective rules matching a filter on one policy?”
Tell an agent
Count the effective rules on role management policy {policy}.
Tell me how many effective rules on PIM policy {policy} match {filter}.
GET /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/rules List the rules configured on a policy · List rules (for a role management policy) #
Ask an LLM
“What approval, expiration, notification and enablement settings are configured on a PIM policy?”
“Where do I see the raw rules defined on one role management policy?”
Tell an agent
List the configured rules of role management policy {policy}.
Show the defined settings rules for PIM policy {policy}, top {top}.
POST /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/rules Add a rule to a policy · Create new navigation property to rules for policies #
Ask an LLM
“Can I add a new configured rule to a role management policy?”
“What target does a newly created PIM policy rule apply to?”
Tell an agent
Add a rule with target {target} to role management policy {policy}.
Create rule {ruleId} in the rules of PIM policy {policy}.
GET /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/rules/{unifiedRoleManagementPolicyRule-id} Get one configured rule of a policy · Get unifiedRoleManagementPolicyRule #
Ask an LLM
“What is the configured setting of one specific rule, like an approval rule, on a PIM policy?”
“Which rule type is a given rule ID on my role management policy?”
Tell an agent
Get configured rule {rule} of role management policy {policy}.
Show the settings of rule {rule} as defined on PIM policy {policy}.
PATCH /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/rules/{unifiedRoleManagementPolicyRule-id} Update a rule on a policy · Update unifiedRoleManagementPolicyRule #
Ask an LLM
“How do I change an approval or expiration rule on a PIM policy?”
“Can I require approval for role activation by updating a policy rule?”
Tell an agent
Update configured rule {rule} on role management policy {policy} with target {target}.
Change the settings of rule {rule} in PIM policy {policy}.
DELETE /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/rules/{unifiedRoleManagementPolicyRule-id} Delete a rule from a policy · Delete navigation property rules for policies #
Ask an LLM
“Can I delete a configured rule from a role management policy?”
“Is removing one setting rule from a PIM policy allowed?”
Tell an agent destructive · confirm first
Delete configured rule {rule} from role management policy {policy}.
Remove setting rule {rule} from PIM policy {policy}.
GET /policies/roleManagementPolicies/{unifiedRoleManagementPolicy-id}/rules/$count Count a policy's configured rules · Get the number of the resource #
Ask an LLM
“How many configured rules are on a role management policy?”
“Can I count a PIM policy's defined rules matching a filter?”
Tell an agent
Count the configured rules of role management policy {policy}.
Tell me how many defined rules on PIM policy {policy} match {filter}.
GET /policies/roleManagementPolicies/$count Count role management policies · Get the number of the resource #
Ask an LLM
“How many PIM role management policies exist in the tenant?”
“Can I get a total of policies for a given scope type?”
Tell an agent
Count all role management policies.
Tell me how many PIM policies match {filter}.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-policies-unifiedrolemanagementpolicy-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-policies-unifiedrolemanagementpolicy-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-policies-unifiedrolemanagementpolicy-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Identity.SignIns Policies.unified Role Management Policy API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (34 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-policies-unifiedrolemanagementpolicy-api-openapi.yml