Microsoft Entra ID (formerly Azure AD) Role Management.rbac Application API
The roleManagement.rbacApplication API from Microsoft Entra ID (formerly Azure AD) — 150 operation(s) for rolemanagement.rbacapplication.
Operations 224
Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay
GET
/roleManagement/directory
Get the directory role management container · Get directory from roleManagement
#
Ask an LLM
“What does the role management directory container expose in Entra ID?”
“Can I read the directory RBAC provider object that holds role definitions and assignments?”
Tell an agent
Get the directory role management container.
Show me the directory RBAC provider root with {expand} expanded.
PATCH
/roleManagement/directory
Update the directory role management container · Update the navigation property directory in roleManagement
#
Ask an LLM
“Can I patch the directory RBAC provider object itself rather than one role?”
“Which collections can be set when updating the directory role management container?”
Tell an agent
Update the directory role management container with resource namespaces {namespaces}.
Patch the directory RBAC provider so its role definitions are {definitions}.
DELETE
/roleManagement/directory
Delete the directory role management container · Delete navigation property directory for roleManagement
#
Ask an LLM
“Is it possible to delete the whole directory RBAC provider navigation property?”
“Can I remove the roleManagement directory object itself?”
Tell an agent destructive · confirm first
Delete the directory role management container.
Remove the directory RBAC provider object from role management.
GET
/roleManagement/directory/resourceNamespaces
List directory resource namespaces · Get resourceNamespaces from roleManagement
#
Ask an LLM
“Which resource namespaces exist for directory role permissions?”
“Where do I see all RBAC resource namespaces such as microsoft.directory?”
Tell an agent
List all resource namespaces in the directory RBAC provider.
Show the first {top} directory resource namespaces.
POST
/roleManagement/directory/resourceNamespaces
Create a directory resource namespace · Create new navigation property to resourceNamespaces for roleManagement
#
Ask an LLM
“Can I add a new resource namespace to the directory RBAC provider?”
“What fields does a new directory resource namespace take?”
Tell an agent
Create a directory resource namespace named {name}.
Add namespace {name} with resource actions {actions} to the directory provider.
GET
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}
Get a directory resource namespace · Get resourceNamespaces from roleManagement
#
Ask an LLM
“How can I look up a single directory resource namespace by its ID?”
“What does one directory resource namespace contain?”
Tell an agent
Get directory resource namespace {namespace}.
Show the details of resource namespace {namespace} in the directory provider.
PATCH
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}
Update a directory resource namespace · Update the navigation property resourceNamespaces in roleManagement
#
Ask an LLM
“Can I rename a directory resource namespace?”
“Is there a way to change the resource actions listed under a directory namespace in one patch?”
Tell an agent
Rename directory resource namespace {namespace} to {name}.
Replace the resource actions on directory namespace {namespace} with {actions}.
DELETE
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}
Delete a directory resource namespace · Delete navigation property resourceNamespaces for roleManagement
#
Ask an LLM
“Can I remove a resource namespace from the directory RBAC provider?”
“What ID do I need to delete a directory resource namespace?”
Tell an agent destructive · confirm first
Delete directory resource namespace {namespace}.
Remove resource namespace {namespace} from directory role management.
GET
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions
List actions in a directory resource namespace · Get resourceActions from roleManagement
#
Ask an LLM
“Which resource actions are defined in a directory resource namespace?”
“Where can I find the permission action strings under a directory namespace?”
Tell an agent
List resource actions in directory namespace {namespace}.
Show every action verb defined under directory resource namespace {namespace}.
POST
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions
Add a resource action to a directory namespace · Create new navigation property to resourceActions for roleManagement
#
Ask an LLM
“Can I add a custom resource action to a directory resource namespace?”
“Is it possible to tie a new directory resource action to an authentication context?”
Tell an agent
Add resource action {name} with verb {verb} to directory namespace {namespace}.
Create directory resource action {name} in namespace {namespace} described as {description}.
GET
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}
Get a resource action in a directory namespace · Get resourceActions from roleManagement
#
Ask an LLM
“What does a specific resource action in a directory namespace allow?”
“Can I check whether one directory resource action supports authentication context?”
Tell an agent
Get resource action {action} in directory namespace {namespace}.
Show the verb and scope of directory resource action {action} under {namespace}.
PATCH
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}
Update a resource action in a directory namespace · Update the navigation property resourceActions in roleManagement
#
Ask an LLM
“Can I change the action verb of an existing directory resource action?”
“How do I make a directory resource action settable by authentication context?”
Tell an agent
Set authentication context {context} on directory resource action {action} in namespace {namespace}.
Update the description of directory action {action} under namespace {namespace} to {description}.
DELETE
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}
Delete a resource action from a directory namespace · Delete navigation property resourceActions for roleManagement
#
Ask an LLM
“How do I remove one resource action from a directory resource namespace?”
“Can a single directory permission action be deleted without dropping its namespace?”
Tell an agent destructive · confirm first
Delete resource action {action} from directory namespace {namespace}.
Remove directory action {action} in namespace {namespace}.
GET
/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/$count
Count actions in a directory resource namespace · Get the number of the resource
#
Ask an LLM
“How many resource actions does a directory resource namespace hold?”
“Can I get just the count of actions in one directory namespace?”
Tell an agent
Count the resource actions in directory namespace {namespace}.
Tell me how many actions directory namespace {namespace} defines.
GET
/roleManagement/directory/resourceNamespaces/$count
Count directory resource namespaces · Get the number of the resource
#
Ask an LLM
“How many resource namespaces does the directory RBAC provider have?”
“Is there a quick way to count directory resource namespaces without listing them?”
Tell an agent
Count the directory resource namespaces.
Give me the number of resource namespaces in directory role management.
GET
/roleManagement/directory/roleAssignments
List directory role assignments · List unifiedRoleAssignments
#
Ask an LLM
“Who has which Entra directory roles assigned in my tenant?”
“Can I filter directory role assignments by principal or role definition?”
Tell an agent
List all directory role assignments.
List directory role assignments matching {filter}.
POST
/roleManagement/directory/roleAssignments
Assign a directory role to a principal · Create unifiedRoleAssignment
#
Ask an LLM
“How do I assign a directory role to a user?”
“Can I scope a directory role assignment to an administrative unit instead of the whole tenant?”
Tell an agent
Assign directory role {role} to principal {principal} at scope {scope}.
Grant principal {principal} the directory role {role} tenant-wide.
GET
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}
Get a directory role assignment · Get unifiedRoleAssignment
#
Ask an LLM
“What does a single directory role assignment contain?”
“Can I look up one directory role assignment by its ID?”
Tell an agent
Get directory role assignment {assignment}.
Show the principal, role and scope for directory role assignment {assignment}.
PATCH
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}
Update a directory role assignment · Update the navigation property roleAssignments in roleManagement
#
Ask an LLM
“Can I change the scope of an existing directory role assignment?”
“Is it possible to add a condition to a directory role assignment after it exists?”
Tell an agent
Change the directory scope of role assignment {assignment} to {scope}.
Set condition {condition} on directory role assignment {assignment}.
DELETE
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}
Remove a directory role assignment · Delete unifiedRoleAssignment
#
Ask an LLM
“How do I revoke a directory role from a user?”
“Can I delete a single directory role assignment by ID?”
Tell an agent destructive · confirm first
Delete directory role assignment {assignment}.
Revoke the directory role granted by assignment {assignment}.
GET
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/appScope
Get the app scope of a directory role assignment · Get appScope from roleManagement
#
Ask an LLM
“Which app-specific scope does a directory role assignment apply to?”
“Where can I see the app scope details of a directory role assignment?”
Tell an agent
Get the app scope of directory role assignment {assignment}.
Show the app-specific scope attached to directory assignment {assignment}.
PATCH
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/appScope
Update the app scope of a directory role assignment · Update the navigation property appScope in roleManagement
#
Ask an LLM
“Can I rename the app scope on a directory role assignment?”
“What fields can I change on a directory role assignment's app scope?”
Tell an agent
Set the app scope display name on directory assignment {assignment} to {name}.
Update the app scope type on directory role assignment {assignment} to {type}.
DELETE
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/appScope
Delete the app scope of a directory role assignment · Delete navigation property appScope for roleManagement
#
Ask an LLM
“Can I remove the app scope from a directory role assignment?”
“How do I clear an app-specific scope on a directory role assignment?”
Tell an agent destructive · confirm first
Delete the app scope on directory role assignment {assignment}.
Clear the app-specific scope from directory assignment {assignment}.
GET
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/directoryScope
Get the scope object of a directory role assignment · Get directoryScope from roleManagement
#
Ask an LLM
“Which directory object is the scope of a directory role assignment?”
“Is a given directory role assignment scoped to an administrative unit or the whole tenant?”
Tell an agent
Get the scope object for directory role assignment {assignment}.
Show what object directory role assignment {assignment} is scoped to.
GET
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/principal
Get the principal of a directory role assignment · Get principal from roleManagement
#
Ask an LLM
“Who is the principal behind a directory role assignment?”
“Can I fetch the user or group that holds a given directory role assignment?”
Tell an agent
Get the principal of directory role assignment {assignment}.
Show who received directory role assignment {assignment}.
GET
/roleManagement/directory/roleAssignments/{unifiedRoleAssignment-id}/roleDefinition
Get the role granted by a directory role assignment · Get roleDefinition from roleManagement
#
Ask an LLM
“Which role does a directory role assignment grant?”
“Where do I see the role definition behind a directory role assignment?”
Tell an agent
Get the role definition for directory role assignment {assignment}.
Show which role directory assignment {assignment} is for.
GET
/roleManagement/directory/roleAssignments/$count
Count directory role assignments · Get the number of the resource
#
Ask an LLM
“How many directory role assignments exist in my tenant?”
“Can I count directory role assignments without paging through them?”
Tell an agent
Count directory role assignments.
Count directory role assignments matching {filter}.
GET
/roleManagement/directory/roleAssignmentScheduleInstances
List active directory role assignment instances · List roleAssignmentScheduleInstances
#
Ask an LLM
“Which directory role assignments are active right now, including PIM activations?”
“Can I see active directory role instances that came from activating an eligible role?”
Tell an agent
List active directory role assignment instances.
List active directory role instances matching {filter}.
POST
/roleManagement/directory/roleAssignmentScheduleInstances
Create an active directory role assignment instance · Create new navigation property to roleAssignmentScheduleInstances for…
#
Ask an LLM
“Can I create an active directory role assignment instance directly?”
“What start and end times does a new directory assignment schedule instance take?”
Tell an agent
Create a directory role assignment instance for schedule {schedule} from {start} to {end}.
Add an active directory assignment instance with assignment type {type}.
GET
/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}
Get an active directory role assignment instance · Get unifiedRoleAssignmentScheduleInstance
#
Ask an LLM
“What does one active directory role assignment instance look like?”
“When does a particular active directory role instance start and end?”
Tell an agent
Get active directory role assignment instance {instance}.
Show start and end times of directory assignment instance {instance}.
PATCH
/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}
Update an active directory role assignment instance · Update the navigation property roleAssignmentScheduleInstances in roleManagement
#
Ask an LLM
“Can I change the end time of an active directory role assignment instance?”
“Which fields can be patched on a directory assignment schedule instance?”
Tell an agent
Set the end time of directory assignment instance {instance} to {end}.
Update member type on active directory role instance {instance} to {memberType}.
DELETE
/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}
Delete an active directory role assignment instance · Delete navigation property roleAssignmentScheduleInstances for roleManagement
#
Ask an LLM
“Can I delete an active directory role assignment instance?”
“What do I need to remove a directory assignment schedule instance by ID?”
Tell an agent destructive · confirm first
Delete directory role assignment instance {instance}.
Remove active directory assignment instance {instance}.
GET
/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/activatedUsing
Get the eligibility behind an active directory role · Get activatedUsing from roleManagement
#
Ask an LLM
“Which eligible assignment was activated to produce an active directory role instance?”
“Can I trace an active directory role instance back to the eligibility it came from?”
Tell an agent
Get the eligibility used to activate directory assignment instance {instance}.
Show which eligible role activation produced active directory instance {instance}.
GET
/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/appScope
Get the app scope of an active directory role instance · Get appScope from roleManagement
#
Ask an LLM
“Is an active directory role instance scoped to a specific app?”
“Where do I find the app scope of an active directory assignment instance?”
Tell an agent
Get the app scope of active directory role instance {instance}.
Show app-specific scope details for directory assignment instance {instance}.
GET
/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/directoryScope
Get the scope object of an active directory role instance · Get directoryScope from roleManagement
#
Ask an LLM
“What directory object is an active directory role instance scoped to?”
“Can I see whether an active directory role instance covers an administrative unit?”
Tell an agent
Get the scope object of active directory role instance {instance}.
Show the directory object that assignment instance {instance} is scoped to.
GET
/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/principal
Get the principal of an active directory role instance · Get principal from roleManagement
#
Ask an LLM
“Who holds a given active directory role assignment instance?”
“Can I fetch the principal of an active directory role instance?”
Tell an agent
Get the principal of active directory role instance {instance}.
Show the user or group behind directory assignment instance {instance}.
GET
/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/roleDefinition
Get the role of an active directory role instance · Get roleDefinition from roleManagement
#
Ask an LLM
“Which role is granted by an active directory role assignment instance?”
“Can I read the role definition behind an active directory role instance?”
Tell an agent
Get the role definition of active directory role instance {instance}.
Show which role directory assignment instance {instance} grants.
GET
/roleManagement/directory/roleAssignmentScheduleInstances/$count
Count active directory role assignment instances · Get the number of the resource
#
Ask an LLM
“How many active directory role assignment instances are there?”
“Can I get a count of directory roles that are active at this moment?”
Tell an agent
Count active directory role assignment instances.
Tell me how many directory roles are active right now.
GET
/roleManagement/directory/roleAssignmentScheduleInstances/microsoft.graph.filterByCurrentUser(on='{on}')
List my active directory role instances · Invoke function filterByCurrentUser
#
Ask an LLM
“Which directory roles are active for me right now?”
“Can I list only my own active directory role instances?”
Tell an agent
List my active directory role instances filtered on {on}.
Show active directory role assignment instances where I am the {on}.
GET
/roleManagement/directory/roleAssignmentScheduleRequests
List PIM directory role assignment requests · List roleAssignmentScheduleRequests
#
Ask an LLM
“What PIM requests for active directory role assignments have been made?”
“Can I see pending and granted directory role assignment requests?”
Tell an agent
List directory role assignment schedule requests.
List PIM directory assignment requests matching {filter}.
POST
/roleManagement/directory/roleAssignmentScheduleRequests
Request an active directory role assignment in PIM · Create roleAssignmentScheduleRequests
#
Ask an LLM
“How do I activate an eligible directory role through PIM with a justification?”
“Can I validate a directory role assignment request without actually submitting it?”
Tell an agent
Request directory role {role} for principal {principal} with action {action} and justification {justification}.
Activate eligible directory role {role} for {principal} on schedule {schedule}.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}
Get a PIM directory role assignment request · Get unifiedRoleAssignmentScheduleRequest
#
Ask an LLM
“How do I check the status of a PIM directory role assignment request?”
“Can I read the justification on a directory assignment request?”
Tell an agent
Get directory role assignment request {request}.
Show status and justification of PIM directory assignment request {request}.
PATCH
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}
Update a directory role assignment request · Update the navigation property roleAssignmentScheduleRequests in roleManagement
#
Ask an LLM
“Can I edit the justification on an existing directory role assignment request?”
“Which fields can be patched on a PIM directory assignment request?”
Tell an agent
Update the justification on directory assignment request {request} to {justification}.
Change ticket info on PIM directory assignment request {request} to {ticket}.
DELETE
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}
Delete a directory role assignment request · Delete navigation property roleAssignmentScheduleRequests for roleManagement
#
Ask an LLM
“Can I delete a directory role assignment request record?”
“What is needed to remove a PIM directory assignment request object?”
Tell an agent destructive · confirm first
Delete directory role assignment request {request}.
Remove PIM directory assignment request {request} from role management.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/activatedUsing
Get the eligibility used by a directory role request · Get activatedUsing from roleManagement
#
Ask an LLM
“Which eligible assignment did a directory activation request use?”
“Can I see the eligibility behind a PIM directory activation request?”
Tell an agent
Get the eligibility used by directory assignment request {request}.
Show which eligible directory role PIM request {request} activated.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/appScope
Get the app scope of a directory role request · Get appScope from roleManagement
#
Ask an LLM
“Is a PIM directory assignment request scoped to an app?”
“Where can I read the app scope of a directory role assignment request?”
Tell an agent
Get the app scope of directory assignment request {request}.
Show the app-specific scope that PIM assignment request {request} targets in the directory.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/directoryScope
Get the scope object of a directory role request · Get directoryScope from roleManagement
#
Ask an LLM
“Which directory object does a PIM directory assignment request use as scope?”
“Can I see the administrative unit a directory role request is scoped to?”
Tell an agent
Get the scope object of directory assignment request {request}.
Show the directory object PIM role request {request} targets as scope.
POST
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/microsoft.graph.cancel
Cancel a granted directory role assignment request · Invoke action cancel
#
Ask an LLM
“How do I cancel a granted PIM directory role assignment request?”
“Can I withdraw a directory role assignment request that was already granted?”
Tell an agent destructive · confirm first
Cancel directory role assignment request {request}.
Withdraw granted PIM directory assignment request {request} now.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/principal
Get the principal of a directory role request · Get principal from roleManagement
#
Ask an LLM
“Who is the principal on a PIM directory role assignment request?”
“Can I fetch the user a directory assignment request was made for?”
Tell an agent
Get the principal of directory assignment request {request}.
Show who PIM directory role request {request} is for.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/roleDefinition
Get the role requested in a directory role request · Get roleDefinition from roleManagement
#
Ask an LLM
“Which role is being requested in a PIM directory assignment request?”
“Can I read the role definition referenced by a directory assignment request?”
Tell an agent
Get the role definition requested in directory assignment request {request}.
Show which role PIM directory request {request} asks for.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/targetSchedule
Get the target schedule of a directory role request · Get targetSchedule from roleManagement
#
Ask an LLM
“Which assignment schedule does a directory role request create or modify?”
“Can I see the target schedule behind a PIM directory assignment request?”
Tell an agent
Get the target schedule of directory assignment request {request}.
Show the schedule PIM directory role request {request} affects.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/$count
Count directory role assignment requests · Get the number of the resource
#
Ask an LLM
“How many directory role assignment requests exist?”
“Can I count PIM directory assignment requests in the tenant?”
Tell an agent
Count directory role assignment requests.
Tell me the number of PIM directory assignment requests.
GET
/roleManagement/directory/roleAssignmentScheduleRequests/microsoft.graph.filterByCurrentUser(on='{on}')
List my directory role assignment requests · Invoke function filterByCurrentUser
#
Ask an LLM
“Which PIM directory role assignment requests did I create or approve?”
“Can I list only my own directory assignment requests?”
Tell an agent
List my directory role assignment requests where I am the {on}.
Show PIM directory assignment requests filtered to me as {on}.
GET
/roleManagement/directory/roleAssignmentSchedules
List directory role assignment schedules · List roleAssignmentSchedules
#
Ask an LLM
“What schedules exist for active directory role assignments?”
“Can I see when active directory role assignments are set to expire?”
Tell an agent
List directory role assignment schedules.
List active directory assignment schedules matching {filter}.
POST
/roleManagement/directory/roleAssignmentSchedules
Create a directory role assignment schedule · Create new navigation property to roleAssignmentSchedules for roleManagement
#
Ask an LLM
“Can I create a directory role assignment schedule object directly?”
“What schedule info does a new directory assignment schedule need?”
Tell an agent
Create a directory role assignment schedule with schedule info {info}.
Add a directory assignment schedule of type {type} for member type {memberType}.
GET
/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}
Get a directory role assignment schedule · Get unifiedRoleAssignmentSchedule
#
Ask an LLM
“What does one directory role assignment schedule contain?”
“When does a specific active directory assignment schedule start and expire?”
Tell an agent
Get directory role assignment schedule {schedule}.
Show the start and expiry of directory assignment schedule {schedule}.
PATCH
/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}
Update a directory role assignment schedule · Update the navigation property roleAssignmentSchedules in roleManagement
#
Ask an LLM
“Can I change the schedule info on a directory role assignment schedule?”
“Which properties are editable on a directory assignment schedule?”
Tell an agent
Update schedule info on directory assignment schedule {schedule} to {info}.
Change the assignment type of directory schedule {schedule} to {type}.
DELETE
/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}
Delete a directory role assignment schedule · Delete navigation property roleAssignmentSchedules for roleManagement
#
Ask an LLM
“Can I delete a directory role assignment schedule?”
“Which ID removes a directory assignment schedule object?”
Tell an agent destructive · confirm first
Delete directory role assignment schedule {schedule}.
Remove directory assignment schedule {schedule}.
GET
/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/activatedUsing
Get the eligibility behind a directory role schedule · Get activatedUsing from roleManagement
#
Ask an LLM
“Which eligible assignment was activated for a directory role assignment schedule?”
“Can I trace a directory assignment schedule back to its eligibility?”
Tell an agent
Get the eligibility activated for directory assignment schedule {schedule}.
Show the eligible role used by directory role schedule {schedule}.
GET
/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/appScope
Get the app scope of a directory role schedule · Get appScope from roleManagement
#
Ask an LLM
“Is a directory role assignment schedule scoped to an app?”
“Where is the app scope of a directory assignment schedule?”
Tell an agent
Get the app scope of directory assignment schedule {schedule}.
Show which app directory assignment schedule {schedule} is limited to.
GET
/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/directoryScope
Get the scope object of a directory role schedule · Get directoryScope from roleManagement
#
Ask an LLM
“Which directory object is a directory role assignment schedule scoped to?”
“Can I check the administrative unit on a directory assignment schedule?”
Tell an agent
Get the scope object of directory assignment schedule {schedule}.
Show the directory object that role schedule {schedule} covers.
GET
/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/principal
Get the principal of a directory role schedule · Get principal from roleManagement
#
Ask an LLM
“Who is the principal on a directory role assignment schedule?”
“Can I fetch the user a directory assignment schedule belongs to?”
Tell an agent
Get the principal of directory assignment schedule {schedule}.
Show the user or group that active directory assignment schedule {schedule} is for.
GET
/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/roleDefinition
Get the role of a directory role schedule · Get roleDefinition from roleManagement
#
Ask an LLM
“What role is attached to a directory role assignment schedule?”
“Can I read the role definition on a directory assignment schedule?”
Tell an agent
Get the role definition of directory assignment schedule {schedule}.
Show which role directory role schedule {schedule} grants.
GET
/roleManagement/directory/roleAssignmentSchedules/$count
Count directory role assignment schedules · Get the number of the resource
#
Ask an LLM
“How many directory role assignment schedules are there?”
“Can I count active directory assignment schedules quickly?”
Tell an agent
Count directory role assignment schedules.
Tell me how many active directory assignment schedules exist.
GET
/roleManagement/directory/roleAssignmentSchedules/microsoft.graph.filterByCurrentUser(on='{on}')
List my directory role assignment schedules · Invoke function filterByCurrentUser
#
Ask an LLM
“Which active directory role schedules am I the principal on?”
“Can I list only the directory assignment schedules for the signed-in user?”
Tell an agent
List my directory role assignment schedules filtered on {on}.
Show directory assignment schedules where I am the {on}.
GET
/roleManagement/directory/roleDefinitions
List directory role definitions · List roleDefinitions
#
Ask an LLM
“Which directory roles, built-in and custom, are available in my tenant?”
“Can I filter directory role definitions to only custom roles?”
Tell an agent
List all directory role definitions.
List directory role definitions matching {filter}.
POST
/roleManagement/directory/roleDefinitions
Create a custom directory role · Create roleDefinitions
#
Ask an LLM
“How do I create a custom Entra directory role with specific permissions?”
“Does creating a custom directory role require a P1 or P2 license?”
Tell an agent
Create custom directory role {name} with permissions {permissions}.
Create a custom directory role {name} described as {description}.
GET
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}
Get a directory role definition · Get unifiedRoleDefinition
#
Ask an LLM
“What permissions does a specific directory role grant?”
“Can I read one directory role definition by ID?”
Tell an agent
Get directory role definition {role}.
Show the permissions in directory role {role}.
PATCH
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}
Update a custom directory role · Update unifiedRoleDefinition
#
Ask an LLM
“Can I change the permissions of a custom directory role?”
“Is it possible to disable a custom directory role without deleting it?”
Tell an agent
Update permissions on custom directory role {role} to {permissions}.
Disable custom directory role {role} by setting enabled to {enabled}.
DELETE
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}
Delete a custom directory role · Delete unifiedRoleDefinition
#
Ask an LLM
“How do I delete a custom directory role?”
“Can built-in directory roles be deleted?”
Tell an agent destructive · confirm first
Delete custom directory role {role}.
Remove directory role definition {role}.
GET
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom
List roles a directory role inherits from · Get inheritsPermissionsFrom from roleManagement
#
Ask an LLM
“Which roles does a directory role definition inherit permissions from?”
“Can I see the inheritance chain of a built-in directory role?”
Tell an agent
List roles that directory role {role} inherits permissions from.
Show inherited role definitions for directory role {role}.
POST
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom
Add an inherited role to a directory role · Create new navigation property to inheritsPermissionsFrom for roleManagement
#
Ask an LLM
“Can I add an inherited role entry to a directory role definition?”
“How do I register a role that a directory role inherits permissions from?”
Tell an agent
Add inherited role {name} to directory role {role}.
Create an inherits-from entry under directory role {role} with permissions {permissions}.
GET
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}
Get one role a directory role inherits from · Get inheritsPermissionsFrom from roleManagement
#
Ask an LLM
“What does one role that a directory role inherits from contain?”
“Can I fetch a specific inherited role definition of a directory role?”
Tell an agent
Get inherited role {parent} of directory role {role}.
Show inherited definition {parent} under directory role {role}.
PATCH
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}
Update an inherited role on a directory role · Update the navigation property inheritsPermissionsFrom in roleManagement
#
Ask an LLM
“Can I edit an inherited role entry on a directory role?”
“Which fields of an inherited directory role entry can be patched?”
Tell an agent
Update inherited role {parent} under directory role {role} with description {description}.
Rename inherited entry {parent} on directory role {role} to {name}.
DELETE
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}
Remove an inherited role from a directory role · Delete navigation property inheritsPermissionsFrom for roleManagement
#
Ask an LLM
“Can I remove an inherited role from a directory role definition?”
“How do I drop one inherits-from link on a directory role?”
Tell an agent destructive · confirm first
Remove inherited role {parent} from directory role {role}.
Delete inheritance link {parent} on directory role definition {role}.
GET
/roleManagement/directory/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/$count
Count roles a directory role inherits from · Get the number of the resource
#
Ask an LLM
“How many roles does a directory role inherit permissions from?”
“Can I count the inherited roles of one directory role definition?”
Tell an agent
Count the roles directory role {role} inherits from.
Tell me how many inherited definitions directory role {role} has.
GET
/roleManagement/directory/roleDefinitions/$count
Count directory role definitions · Get the number of the resource
#
Ask an LLM
“How many directory role definitions exist in my tenant?”
“Can I count custom directory roles only?”
Tell an agent
Count directory role definitions.
Count directory role definitions matching {filter}.
GET
/roleManagement/directory/roleEligibilityScheduleInstances
List directory role eligibility instances · List roleEligibilityScheduleInstances
#
Ask an LLM
“Which users are currently eligible for directory roles?”
“Can I list role eligibility instances in the directory provider?”
Tell an agent
List directory role eligibility instances.
List directory eligibility instances matching {filter}.
POST
/roleManagement/directory/roleEligibilityScheduleInstances
Create a directory role eligibility instance · Create new navigation property to roleEligibilityScheduleInstances for…
#
Ask an LLM
“Can I create a directory role eligibility instance directly?”
“What start and end times does a new directory eligibility instance take?”
Tell an agent
Create a directory eligibility instance for schedule {schedule} from {start} to {end}.
Add a directory role eligibility instance with member type {memberType}.
GET
/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}
Get a directory role eligibility instance · Get unifiedRoleEligibilityScheduleInstance
#
Ask an LLM
“What does one directory role eligibility instance contain?”
“When does a particular directory role eligibility start and end?”
Tell an agent
Get directory role eligibility instance {instance}.
Show the eligibility window of directory eligibility instance {instance}.
PATCH
/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}
Update a directory role eligibility instance · Update the navigation property roleEligibilityScheduleInstances in…
#
Ask an LLM
“Can I change the end date of a directory role eligibility instance?”
“Which fields are editable on a directory eligibility instance?”
Tell an agent
Set the end time of directory eligibility instance {instance} to {end}.
Change member type on directory role eligibility instance {instance} to {memberType}.
DELETE
/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}
Delete a directory role eligibility instance · Delete navigation property roleEligibilityScheduleInstances for roleManagement
#
Ask an LLM
“Can I delete a directory role eligibility instance?”
“What ID removes one directory eligibility instance?”
Tell an agent destructive · confirm first
Delete directory role eligibility instance {instance}.
Remove directory eligibility instance {instance}.
GET
/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/appScope
Get the app scope of a directory eligibility instance · Get appScope from roleManagement
#
Ask an LLM
“Is a directory role eligibility instance scoped to an app?”
“Where is the app scope of a directory eligibility instance shown?”
Tell an agent
Get the app scope of directory eligibility instance {instance}.
Show app-specific scope for directory role eligibility instance {instance}.
GET
/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/directoryScope
Get the scope object of a directory eligibility instance · Get directoryScope from roleManagement
#
Ask an LLM
“Which directory object does a directory role eligibility instance cover?”
“Can I see the administrative unit a directory eligibility instance is scoped to?”
Tell an agent
Get the scope object of directory eligibility instance {instance}.
Show the directory object eligibility instance {instance} is scoped to.
GET
/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/principal
Get the principal of a directory eligibility instance · Get principal from roleManagement
#
Ask an LLM
“Who is eligible under a given directory role eligibility instance?”
“Can I fetch the principal of a directory eligibility instance?”
Tell an agent
Get the principal of directory eligibility instance {instance}.
Show which user or group directory eligibility instance {instance} belongs to.
GET
/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/roleDefinition
Get the role of a directory eligibility instance · Get roleDefinition from roleManagement
#
Ask an LLM
“Which role is a directory role eligibility instance for?”
“Can I read the role definition behind a directory eligibility instance?”
Tell an agent
Get the role definition of directory eligibility instance {instance}.
Show which role directory eligibility instance {instance} makes someone eligible for.
GET
/roleManagement/directory/roleEligibilityScheduleInstances/$count
Count directory role eligibility instances · Get the number of the resource
#
Ask an LLM
“How many directory role eligibility instances are there?”
“Can I count directory eligibilities without listing them?”
Tell an agent
Count directory role eligibility instances.
Tell me how many directory role eligibilities exist right now.
GET
/roleManagement/directory/roleEligibilityScheduleInstances/microsoft.graph.filterByCurrentUser(on='{on}')
List my directory role eligibility instances · Invoke function filterByCurrentUser
#
Ask an LLM
“Which directory roles am I eligible to activate?”
“Can I list only my own directory role eligibility instances?”
Tell an agent
List my directory role eligibility instances filtered on {on}.
Show directory eligibility instances where I am the {on}.
GET
/roleManagement/directory/roleEligibilityScheduleRequests
List PIM directory role eligibility requests · List roleEligibilityScheduleRequests
#
Ask an LLM
“What PIM requests for directory role eligibility have been made?”
“Can I see which principals asked to become eligible for directory roles?”
Tell an agent
List directory role eligibility requests.
List PIM directory eligibility requests matching {filter}.
POST
/roleManagement/directory/roleEligibilityScheduleRequests
Request a directory role eligibility in PIM · Create roleEligibilityScheduleRequest
#
Ask an LLM
“How do I make a user eligible for a directory role through PIM?”
“Can I remove or extend a directory role eligibility with an eligibility request?”
Tell an agent
Make principal {principal} eligible for directory role {role} with action {action}.
Request directory eligibility for {principal} on role {role} with justification {justification}.
GET
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}
Get a PIM directory role eligibility request · Get unifiedRoleEligibilityScheduleRequest
#
Ask an LLM
“How do I check the status of a directory role eligibility request?”
“Can I read the justification on a PIM directory eligibility request?”
Tell an agent
Get directory role eligibility request {request}.
Show status and justification of PIM directory eligibility request {request}.
PATCH
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}
Update a directory role eligibility request · Update the navigation property roleEligibilityScheduleRequests in roleManagement
#
Ask an LLM
“Can I edit the justification on a directory role eligibility request?”
“Which fields can be patched on a PIM directory eligibility request?”
Tell an agent
Update the justification on directory eligibility request {request} to {justification}.
Change the schedule on PIM directory eligibility request {request} to {info}.
DELETE
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}
Delete a directory role eligibility request · Delete navigation property roleEligibilityScheduleRequests for roleManagement
#
Ask an LLM
“Can I delete a directory role eligibility request record?”
“What is required to remove a PIM directory eligibility request object?”
Tell an agent destructive · confirm first
Delete directory role eligibility request {request}.
Remove PIM directory eligibility request {request} from role management.
GET
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/appScope
Get the app scope of a directory eligibility request · Get appScope from roleManagement
#
Ask an LLM
“Is a PIM directory eligibility request scoped to an app?”
“Where do I find which app a directory eligibility request is limited to?”
Tell an agent
Get the app scope of directory eligibility request {request}.
Show app-specific scope for PIM directory eligibility request {request}.
GET
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/directoryScope
Get the scope object of a directory eligibility request · Get directoryScope from roleManagement
#
Ask an LLM
“Which directory object is a PIM directory eligibility request scoped to?”
“Can I see the administrative unit targeted by a directory eligibility request?”
Tell an agent
Get the scope object of directory eligibility request {request}.
Show the directory object PIM eligibility request {request} is scoped to.
POST
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/microsoft.graph.cancel
Cancel a granted directory role eligibility request · Invoke action cancel
#
Ask an LLM
“How do I cancel a granted PIM directory role eligibility request?”
“Can I withdraw a directory eligibility request after it was granted?”
Tell an agent destructive · confirm first
Cancel directory role eligibility request {request}.
Withdraw granted PIM directory eligibility request {request} now.
GET
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/principal
Get the principal of a directory eligibility request · Get principal from roleManagement
#
Ask an LLM
“Who is the principal on a PIM directory eligibility request?”
“Can I fetch the user a directory eligibility request was made for?”
Tell an agent
Get the principal of directory eligibility request {request}.
Show who PIM directory eligibility request {request} is for.
GET
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/roleDefinition
Get the role in a directory eligibility request · Get roleDefinition from roleManagement
#
Ask an LLM
“Which role does a PIM directory eligibility request ask for?”
“Can I read the role definition referenced by a directory eligibility request?”
Tell an agent
Get the role definition in directory eligibility request {request}.
Show which role PIM directory eligibility request {request} targets.
GET
/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/targetSchedule
Get the target schedule of a directory eligibility request · Get targetSchedule from roleManagement
#
Ask an LLM
“Which eligibility schedule does a directory eligibility request create or change?”
“Can I see the target schedule of a PIM directory eligibility request?”
Tell an agent
Get the target schedule of directory eligibility request {request}.
Show the eligibility schedule PIM directory request {request} affects.
GET
/roleManagement/directory/roleEligibilityScheduleRequests/$count
Count directory role eligibility requests · Get the number of the resource
#
Ask an LLM
“How many directory role eligibility requests exist?”
“Can I count PIM directory eligibility requests in my tenant?”
Tell an agent
Count directory role eligibility requests.
Tell me the number of PIM directory eligibility requests.
GET
/roleManagement/directory/roleEligibilityScheduleRequests/microsoft.graph.filterByCurrentUser(on='{on}')
List my directory role eligibility requests · Invoke function filterByCurrentUser
#
Ask an LLM
“Which PIM directory eligibility requests did I create or approve?”
“Can I list only my own directory role eligibility requests?”
Tell an agent
List my directory role eligibility requests where I am the {on}.
Show PIM directory eligibility requests filtered to me as {on}.
GET
/roleManagement/directory/roleEligibilitySchedules
List directory role eligibility schedules · List roleEligibilitySchedules
#
Ask an LLM
“What schedules exist for directory role eligibilities?”
“Can I see when directory role eligibilities are set to expire?”
Tell an agent
List directory role eligibility schedules.
List directory eligibility schedules matching {filter}.
POST
/roleManagement/directory/roleEligibilitySchedules
Create a directory role eligibility schedule · Create new navigation property to roleEligibilitySchedules for roleManagement
#
Ask an LLM
“Can I create a directory role eligibility schedule object directly?”
“What schedule info does a new directory eligibility schedule need?”
Tell an agent
Create a directory role eligibility schedule with schedule info {info}.
Add a directory eligibility schedule for member type {memberType}.
GET
/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}
Get a directory role eligibility schedule · Get unifiedRoleEligibilitySchedule
#
Ask an LLM
“What does one directory role eligibility schedule contain?”
“When does a specific directory eligibility schedule start and expire?”
Tell an agent
Get directory role eligibility schedule {schedule}.
Show the start and expiry of directory eligibility schedule {schedule}.
PATCH
/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}
Update a directory role eligibility schedule · Update the navigation property roleEligibilitySchedules in roleManagement
#
Ask an LLM
“Can I change the schedule info on a directory role eligibility schedule?”
“Which properties are editable on a directory eligibility schedule?”
Tell an agent
Update schedule info on directory eligibility schedule {schedule} to {info}.
Change member type of directory eligibility schedule {schedule} to {memberType}.
DELETE
/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}
Delete a directory role eligibility schedule · Delete navigation property roleEligibilitySchedules for roleManagement
#
Ask an LLM
“Can I delete a directory role eligibility schedule?”
“Which ID removes a directory eligibility schedule object?”
Tell an agent destructive · confirm first
Delete directory role eligibility schedule {schedule}.
Remove directory eligibility schedule {schedule}.
GET
/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/appScope
Get the app scope of a directory eligibility schedule · Get appScope from roleManagement
#
Ask an LLM
“Is a directory role eligibility schedule scoped to an app?”
“Where is the app scope of a directory eligibility schedule?”
Tell an agent
Get the app scope of directory eligibility schedule {schedule}.
Show app-specific scope for directory role eligibility schedule {schedule}.
GET
/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/directoryScope
Get the scope object of a directory eligibility schedule · Get directoryScope from roleManagement
#
Ask an LLM
“Which directory object is a directory eligibility schedule scoped to?”
“Can I check the administrative unit on a directory role eligibility schedule?”
Tell an agent
Get the scope object of directory eligibility schedule {schedule}.
Show the directory object eligibility schedule {schedule} covers.
GET
/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/principal
Get the principal of a directory eligibility schedule · Get principal from roleManagement
#
Ask an LLM
“Who is the principal on a directory role eligibility schedule?”
“Can I fetch the user a directory eligibility schedule belongs to?”
Tell an agent
Get the principal of directory eligibility schedule {schedule}.
Show who directory role eligibility schedule {schedule} applies to.
GET
/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/roleDefinition
Get the role of a directory eligibility schedule · Get roleDefinition from roleManagement
#
Ask an LLM
“Which role does a directory role eligibility schedule make someone eligible for?”
“Can I read the role definition on a directory eligibility schedule?”
Tell an agent
Get the role definition of directory eligibility schedule {schedule}.
Show which role directory eligibility schedule {schedule} is for.
GET
/roleManagement/directory/roleEligibilitySchedules/$count
Count directory role eligibility schedules · Get the number of the resource
#
Ask an LLM
“How many directory role eligibility schedules are there?”
“Can I count directory eligibility schedules quickly?”
Tell an agent
Count directory role eligibility schedules.
Tell me how many directory eligibility schedules exist.
GET
/roleManagement/directory/roleEligibilitySchedules/microsoft.graph.filterByCurrentUser(on='{on}')
List my directory role eligibility schedules · Invoke function filterByCurrentUser
#
Ask an LLM
“Which directory role eligibility schedules am I the principal on?”
“Can I list only the directory eligibility schedules for the signed-in user?”
Tell an agent
List my directory role eligibility schedules filtered on {on}.
Show directory eligibility schedules where I am the {on}.
GET
/roleManagement/entitlementManagement
Get the entitlement management RBAC container · Get entitlementManagement from roleManagement
#
Ask an LLM
“What sits inside the entitlement management role container?”
“Can I read the roles and assignments root for entitlement management resources?”
Tell an agent
Get the entitlement management RBAC container.
Fetch the entitlement management roles root with {expand} included.
PATCH
/roleManagement/entitlementManagement
Update the entitlement management RBAC container · Update the navigation property entitlementManagement in roleManagement
#
Ask an LLM
“Can I patch the entitlement management provider object as a whole?”
“Which navigation collections are settable on the entitlement management container?”
Tell an agent
Patch the entitlement management container with role assignments {assignments}.
Set resource namespaces {namespaces} on the entitlement management RBAC root.
DELETE
/roleManagement/entitlementManagement
Delete the entitlement management RBAC container · Delete navigation property entitlementManagement for roleManagement
#
Ask an LLM
“Is the entitlement management role container something I can delete?”
“What happens to the RBAC root for entitlement management if I remove it?”
Tell an agent destructive · confirm first
Delete the entitlement management RBAC container.
Remove the entitlement management provider node from role management.
GET
/roleManagement/entitlementManagement/resourceNamespaces
List entitlement management resource namespaces · Get resourceNamespaces from roleManagement
#
Ask an LLM
“What resource namespaces does entitlement management define for its permissions?”
“Is there a list of RBAC namespaces used by entitlement management?”
Tell an agent
List resource namespaces under entitlement management.
Return {top} entitlement management resource namespaces.
POST
/roleManagement/entitlementManagement/resourceNamespaces
Create an entitlement management resource namespace · Create new navigation property to resourceNamespaces for roleManagement
#
Ask an LLM
“Can I register a new resource namespace for entitlement management?”
“What does a new entitlement management namespace need besides a name?”
Tell an agent
Register entitlement management resource namespace {name}.
Create namespace {name} for entitlement management containing actions {actions}.
GET
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}
Get an entitlement management resource namespace · Get resourceNamespaces from roleManagement
#
Ask an LLM
“How can I fetch one entitlement management resource namespace?”
“What is inside a particular entitlement management namespace?”
Tell an agent
Fetch entitlement management namespace {namespace}.
Look up resource namespace {namespace} used by entitlement management.
PATCH
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}
Update an entitlement management resource namespace · Update the navigation property resourceNamespaces in roleManagement
#
Ask an LLM
“Can I change the name of an entitlement management namespace?”
“Is it possible to swap out the action list of an entitlement management namespace?”
Tell an agent
Change the name of entitlement management namespace {namespace} to {name}.
Set actions {actions} on entitlement management namespace {namespace}.
DELETE
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}
Delete an entitlement management resource namespace · Delete navigation property resourceNamespaces for roleManagement
#
Ask an LLM
“Can an entitlement management resource namespace be removed?”
“Which identifier do I pass to drop an entitlement management namespace?”
Tell an agent destructive · confirm first
Drop entitlement management namespace {namespace}.
Delete resource namespace {namespace} from entitlement management.
GET
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions
List actions in an entitlement management namespace · Get resourceActions from roleManagement
#
Ask an LLM
“What permission actions live under an entitlement management namespace?”
“Can I enumerate the resource actions entitlement management defines in one namespace?”
Tell an agent
Enumerate the actions in entitlement management namespace {namespace}.
Return all resource actions for entitlement management namespace {namespace}.
POST
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions
Add a resource action to an entitlement management namespace · Create new navigation property to resourceActions for roleManagement
#
Ask an LLM
“Can I define a new permission action inside an entitlement management namespace?”
“Does a new entitlement management resource action accept an authentication context ID?”
Tell an agent
Define action {name} using verb {verb} in entitlement management namespace {namespace}.
Add an entitlement management action {name} to {namespace} scoped to {resourceScope}.
GET
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}
Get a resource action in an entitlement management namespace · Get resourceActions from roleManagement
#
Ask an LLM
“What does one entitlement management resource action permit?”
“Can I fetch a single action from an entitlement management namespace?”
Tell an agent
Fetch action {action} from entitlement management namespace {namespace}.
Look up entitlement management resource action {action} in {namespace}.
PATCH
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}
Update a resource action in an entitlement namespace · Update the navigation property resourceActions in roleManagement
#
Ask an LLM
“Can I edit an existing entitlement management resource action?”
“Is it possible to toggle whether an entitlement management action allows authentication context?”
Tell an agent
Change the verb of entitlement management action {action} in {namespace} to {verb}.
Allow authentication context on entitlement management action {action} in {namespace}: {settable}.
DELETE
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/{unifiedRbacResourceAction-id}
Delete a resource action from an entitlement namespace · Delete navigation property resourceActions for roleManagement
#
Ask an LLM
“Can I drop one action from an entitlement management namespace?”
“What identifiers are needed to delete an entitlement management resource action?”
Tell an agent destructive · confirm first
Drop action {action} from entitlement management namespace {namespace}.
Delete entitlement management resource action {action} under {namespace}.
GET
/roleManagement/entitlementManagement/resourceNamespaces/{unifiedRbacResourceNamespace-id}/resourceActions/$count
Count actions in an entitlement management namespace · Get the number of the resource
#
Ask an LLM
“What is the number of actions in an entitlement management namespace?”
“Can I get an action total for one entitlement management namespace?”
Tell an agent
Return the action total for entitlement management namespace {namespace}.
Give me just the number of resource actions in entitlement management namespace {namespace}.
GET
/roleManagement/entitlementManagement/resourceNamespaces/$count
Count entitlement management resource namespaces · Get the number of the resource
#
Ask an LLM
“What is the total number of entitlement management resource namespaces?”
“Can I get only a namespace count for entitlement management?”
Tell an agent
Return the entitlement management namespace total.
Get a count of resource namespaces in entitlement management.
GET
/roleManagement/entitlementManagement/roleAssignments
List entitlement management role assignments · List unifiedRoleAssignments
#
Ask an LLM
“Who holds entitlement management roles such as catalog owner or reader?”
“Can I narrow entitlement management role assignments to one principal?”
Tell an agent
Show every entitlement management role assignment.
Find entitlement management role assignments where {filter}.
POST
/roleManagement/entitlementManagement/roleAssignments
Assign an entitlement management role · Create unifiedRoleAssignment
#
Ask an LLM
“Can I grant a user an entitlement management role through the API?”
“What scope does an entitlement management role assignment take?”
Tell an agent
Give principal {principal} entitlement management role {role} on scope {scope}.
Create an entitlement management role assignment of {role} for {principal} scoped to app {appScope}.
GET
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}
Get an entitlement management role assignment · Get roleAssignments from roleManagement
#
Ask an LLM
“What does one entitlement management role assignment record hold?”
“Can I fetch a single entitlement management role grant by ID?”
Tell an agent
Fetch entitlement management role assignment {assignment}.
Look up who, what and where for entitlement management assignment {assignment}.
PATCH
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}
Update an entitlement management role assignment · Update the navigation property roleAssignments in roleManagement
#
Ask an LLM
“Can I move an entitlement management role assignment to a different scope?”
“Is an entitlement management role assignment editable after it is created?”
Tell an agent
Move entitlement management assignment {assignment} to scope {scope}.
Switch entitlement management assignment {assignment} to role {role}.
DELETE
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}
Remove an entitlement management role assignment · Delete navigation property roleAssignments for roleManagement
#
Ask an LLM
“Can I take an entitlement management role away from someone?”
“What ID do I need to drop an entitlement management role grant?”
Tell an agent destructive · confirm first
Drop entitlement management role assignment {assignment}.
Take away the entitlement management role granted by {assignment}.
GET
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/appScope
Get the app scope of an entitlement management assignment · Get appScope from roleManagement
#
Ask an LLM
“Which app scope applies to an entitlement management role assignment?”
“Can I see app-specific scope details on an entitlement management role grant?”
Tell an agent
Fetch the app scope for entitlement management role grant {assignment}.
Look up which app entitlement management role grant {assignment} is limited to.
PATCH
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/appScope
Update the app scope of an entitlement management assignment · Update the navigation property appScope in roleManagement
#
Ask an LLM
“Can I edit the app scope attached to an entitlement management role assignment?”
“What app scope properties are editable on an entitlement management grant?”
Tell an agent
Rename the app scope on entitlement management assignment {assignment} to {name}.
Change app scope type for entitlement management role grant {assignment} to {type}.
DELETE
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/appScope
Delete the app scope of an entitlement management assignment · Delete navigation property appScope for roleManagement
#
Ask an LLM
“Can I drop the app scope on an entitlement management role assignment?”
“Is removing the app-specific scope from an entitlement management grant supported?”
Tell an agent destructive · confirm first
Drop the app scope from entitlement management assignment {assignment}.
Remove app-specific scoping on entitlement management role grant {assignment}.
GET
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/directoryScope
Get the scope object of an entitlement management assignment · Get directoryScope from roleManagement
#
Ask an LLM
“What object is an entitlement management role assignment scoped to?”
“Can I resolve the scope of an entitlement management role grant to a real object?”
Tell an agent
Fetch the scope object for entitlement management role grant {assignment}.
Resolve what entitlement management role grant {assignment} is scoped to.
GET
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/principal
Get the principal of an entitlement management assignment · Get principal from roleManagement
#
Ask an LLM
“Who received a particular entitlement management role assignment?”
“Can I resolve the principal on an entitlement management role grant?”
Tell an agent
Fetch the principal for entitlement management role grant {assignment}.
Resolve the user or group holding entitlement management role grant {assignment}.
GET
/roleManagement/entitlementManagement/roleAssignments/{unifiedRoleAssignment-id}/roleDefinition
Get the role of an entitlement management assignment · Get roleDefinition from roleManagement
#
Ask an LLM
“What role does a given entitlement management assignment confer?”
“Can I resolve the role definition of an entitlement management role grant?”
Tell an agent
Fetch the role definition for entitlement management role grant {assignment}.
Resolve which role entitlement management grant {assignment} confers.
GET
/roleManagement/entitlementManagement/roleAssignments/$count
Count entitlement management role assignments · Get the number of the resource
#
Ask an LLM
“What is the total number of entitlement management role assignments?”
“Can I get only the count of entitlement management role grants?”
Tell an agent
Return the entitlement management role assignment total.
Get a count of entitlement management role grants where {filter}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances
List active entitlement management role instances · Get roleAssignmentScheduleInstances from roleManagement
#
Ask an LLM
“Which entitlement management roles are active at this moment?”
“Can I enumerate active entitlement management assignment instances?”
Tell an agent
Enumerate active entitlement management assignment instances.
Find active entitlement management role instances where {filter}.
POST
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances
Create an active entitlement management role instance · Create new navigation property to roleAssignmentScheduleInstances for…
#
Ask an LLM
“Can I add an active entitlement management assignment instance myself?”
“What time window does a new entitlement management assignment instance accept?”
Tell an agent
Add an entitlement management assignment instance on schedule {schedule} running {start} to {end}.
Create an active entitlement management instance whose origin is {origin}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}
Get an active entitlement management role instance · Get roleAssignmentScheduleInstances from roleManagement
#
Ask an LLM
“What details come back for one active entitlement management role instance?”
“Can I fetch a single active entitlement management assignment instance?”
Tell an agent
Fetch active entitlement management instance {instance}.
Look up the time window of entitlement management assignment instance {instance}.
PATCH
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}
Update an active entitlement management role instance · Update the navigation property roleAssignmentScheduleInstances in roleManagement
#
Ask an LLM
“Can I shorten an active entitlement management assignment instance?”
“What can be edited on an active entitlement management role instance?”
Tell an agent
Move the end of entitlement management assignment instance {instance} to {end}.
Change the assignment type of active entitlement management instance {instance} to {type}.
DELETE
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}
Delete an active entitlement management role instance · Delete navigation property roleAssignmentScheduleInstances for roleManagement
#
Ask an LLM
“Can I drop an active entitlement management assignment instance?”
“Which ID deletes an active entitlement management role instance?”
Tell an agent destructive · confirm first
Drop active entitlement management instance {instance}.
Delete entitlement management assignment instance {instance}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/activatedUsing
Get the eligibility behind an active entitlement role · Get activatedUsing from roleManagement
#
Ask an LLM
“Which eligibility was activated to create an active entitlement management instance?”
“Can I find the eligible assignment behind an active entitlement management role?”
Tell an agent
Fetch the eligibility that activated entitlement management instance {instance}.
Resolve the eligible assignment used for active entitlement management instance {instance}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/appScope
Get the app scope of an active entitlement instance · Get appScope from roleManagement
#
Ask an LLM
“Is an active entitlement management role instance limited to an app?”
“Can I read app scope details for an active entitlement management instance?”
Tell an agent
Fetch the app scope for active entitlement management instance {instance}.
Resolve which app entitlement management assignment instance {instance} is limited to.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/directoryScope
Get the scope object of an active entitlement instance · Get directoryScope from roleManagement
#
Ask an LLM
“What object does an active entitlement management role instance apply to?”
“Can I resolve the scope of an active entitlement management assignment instance?”
Tell an agent
Fetch the scope object for active entitlement management instance {instance}.
Resolve the object entitlement management assignment instance {instance} applies to.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/principal
Get the principal of an active entitlement instance · Get principal from roleManagement
#
Ask an LLM
“Who is the holder of an active entitlement management role instance?”
“Can I resolve the user behind an active entitlement management assignment instance?”
Tell an agent
Fetch the principal for active entitlement management instance {instance}.
Resolve who holds entitlement management assignment instance {instance}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstance-id}/roleDefinition
Get the role of an active entitlement management instance · Get roleDefinition from roleManagement
#
Ask an LLM
“What role does an active entitlement management instance confer?”
“Can I resolve the role definition of an active entitlement management assignment instance?”
Tell an agent
Fetch the role definition for active entitlement management instance {instance}.
Resolve which role entitlement management assignment instance {instance} confers.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/$count
Count active entitlement management role instances · Get the number of the resource
#
Ask an LLM
“What is the total of active entitlement management role instances?”
“Can I get just a number of active entitlement management assignments?”
Tell an agent
Return the active entitlement management instance total.
Get a count of active entitlement management assignment instances.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleInstances/microsoft.graph.filterByCurrentUser(on='{on}')
List my active entitlement management role instances · Invoke function filterByCurrentUser
#
Ask an LLM
“Which entitlement management roles are active for me?”
“Can I see only the active entitlement management instances where I am the principal?”
Tell an agent
Find my active entitlement management instances by {on}.
Return active entitlement management assignment instances for me as {on}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests
List entitlement management role assignment requests · Get roleAssignmentScheduleRequests from roleManagement
#
Ask an LLM
“What PIM requests for active entitlement management roles exist?”
“Can I enumerate entitlement management assignment requests and their status?”
Tell an agent
Enumerate entitlement management role assignment requests.
Find entitlement management assignment requests where {filter}.
POST
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests
Request an entitlement management role assignment · Create new navigation property to roleAssignmentScheduleRequests for…
#
Ask an LLM
“Can I request an active entitlement management role through PIM?”
“Does an entitlement management assignment request accept a justification and ticket?”
Tell an agent
Submit an entitlement management assignment request for {principal} on role {role} with action {action}.
Request entitlement management role {role} for {principal} citing {justification} and ticket {ticket}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}
Get an entitlement management role assignment request · Get roleAssignmentScheduleRequests from roleManagement
#
Ask an LLM
“What is the status of a given entitlement management assignment request?”
“Can I fetch a single PIM activation request for an entitlement management role assignment?”
Tell an agent
Fetch entitlement management assignment request {request}.
Look up status of entitlement management role request {request}.
PATCH
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}
Update an entitlement management role assignment request · Update the navigation property roleAssignmentScheduleRequests in roleManagement
#
Ask an LLM
“Can I edit an entitlement management assignment request after submitting it?”
“What is editable on an entitlement management role request?”
Tell an agent
Rewrite the justification on entitlement management assignment request {request} as {justification}.
Set schedule {info} on entitlement management assignment request {request}.
DELETE
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}
Delete an entitlement management role assignment request · Delete navigation property roleAssignmentScheduleRequests for roleManagement
#
Ask an LLM
“Can I drop an entitlement management assignment request record?”
“Which ID deletes an entitlement management role request?”
Tell an agent destructive · confirm first
Drop entitlement management assignment request {request}.
Delete entitlement management role request {request}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/activatedUsing
Get the eligibility used by an entitlement request · Get activatedUsing from roleManagement
#
Ask an LLM
“Which eligibility does an entitlement management activation request rely on?”
“Can I find the eligible assignment used by an entitlement management role request?”
Tell an agent
Fetch the eligibility used by entitlement management request {request}.
Resolve the eligible assignment behind entitlement management role request {request}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/appScope
Get the app scope of an entitlement management request · Get appScope from roleManagement
#
Ask an LLM
“Is an entitlement management assignment request limited to an app?”
“Can I read the app scope on an entitlement management role request?”
Tell an agent
Fetch the app scope for entitlement management assignment request {request}.
Resolve which app entitlement management role request {request} is limited to.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/directoryScope
Get the scope object of an entitlement management request · Get directoryScope from roleManagement
#
Ask an LLM
“What object is an entitlement management assignment request scoped to?”
“Can I resolve the scope of an entitlement management role request?”
Tell an agent
Fetch the scope object for entitlement management assignment request {request}.
Resolve the object entitlement management role request {request} is scoped to.
POST
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/microsoft.graph.cancel
Cancel an entitlement management role assignment request · Invoke action cancel
#
Ask an LLM
“Can I cancel an entitlement management assignment request that was granted?”
“Is there a way to call off a granted entitlement management role request?”
Tell an agent destructive · confirm first
Cancel entitlement management assignment request {request}.
Call off granted entitlement management role request {request}.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/principal
Get the principal of an entitlement management request · Get principal from roleManagement
#
Ask an LLM
“Who is an entitlement management assignment request for?”
“Can I resolve the principal on an entitlement management role request?”
Tell an agent
Fetch the principal for entitlement management assignment request {request}.
Resolve who entitlement management role request {request} is for.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/roleDefinition
Get the role in an entitlement management request · Get roleDefinition from roleManagement
#
Ask an LLM
“What role is asked for in an entitlement management assignment request?”
“Can I resolve the role definition an entitlement management assignment request asks for?”
Tell an agent
Fetch the role definition for entitlement management assignment request {request}.
Name the role that entitlement management assignment request {request} is seeking.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequest-id}/targetSchedule
Get the target schedule of an entitlement management request · Get targetSchedule from roleManagement
#
Ask an LLM
“Which schedule does an entitlement management assignment request point at?”
“Can I resolve the target schedule of an entitlement management role request?”
Tell an agent
Fetch the target schedule for entitlement management assignment request {request}.
Resolve the schedule entitlement management role request {request} targets.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/$count
Count entitlement management role assignment requests · Get the number of the resource
#
Ask an LLM
“What is the total of entitlement management assignment requests?”
“Can I get just a number of entitlement management role requests?”
Tell an agent
Return the entitlement management assignment request total.
Get a count of entitlement management assignment requests.
GET
/roleManagement/entitlementManagement/roleAssignmentScheduleRequests/microsoft.graph.filterByCurrentUser(on='{on}')
List my entitlement management role assignment requests · Invoke function filterByCurrentUser
#
Ask an LLM
“Which entitlement management assignment requests have I created or approved?”
“Can I see only my own entitlement management role requests?”
Tell an agent
Find my entitlement management assignment requests by {on}.
Return entitlement management role requests for me as {on}.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules
List entitlement management role assignment schedules · Get roleAssignmentSchedules from roleManagement
#
Ask an LLM
“What active assignment schedules does entitlement management have?”
“Can I enumerate entitlement management assignment schedules and their expiry?”
Tell an agent
Enumerate entitlement management role assignment schedules.
Find entitlement management assignment schedules where {filter}.
POST
/roleManagement/entitlementManagement/roleAssignmentSchedules
Create an entitlement management role assignment schedule · Create new navigation property to roleAssignmentSchedules for roleManagement
#
Ask an LLM
“Can I add an entitlement management assignment schedule directly?”
“What does a new entitlement management assignment schedule require?”
Tell an agent
Add an entitlement management assignment schedule using schedule info {info}.
Create an entitlement management assignment schedule with assignment type {type}.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}
Get an entitlement management role assignment schedule · Get roleAssignmentSchedules from roleManagement
#
Ask an LLM
“What does a single entitlement management assignment schedule show?”
“Can I fetch one entitlement management role assignment schedule?”
Tell an agent
Fetch entitlement management assignment schedule {schedule}.
Look up expiry of entitlement management role schedule {schedule}.
PATCH
/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}
Update an entitlement management role assignment schedule · Update the navigation property roleAssignmentSchedules in roleManagement
#
Ask an LLM
“Can I edit the timing of an entitlement management assignment schedule?”
“What is editable on an entitlement management role assignment schedule?”
Tell an agent
Set schedule info {info} on entitlement management assignment schedule {schedule}.
Change member type of entitlement management role schedule {schedule} to {memberType}.
DELETE
/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}
Delete an entitlement management role assignment schedule · Delete navigation property roleAssignmentSchedules for roleManagement
#
Ask an LLM
“Can I drop an entitlement management assignment schedule?”
“Which ID deletes an entitlement management role assignment schedule?”
Tell an agent destructive · confirm first
Drop entitlement management assignment schedule {schedule}.
Delete entitlement management role schedule {schedule}.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/activatedUsing
Get the eligibility behind an entitlement schedule · Get activatedUsing from roleManagement
#
Ask an LLM
“Which eligibility was activated for an entitlement management assignment schedule?”
“Can I find the eligible assignment behind an entitlement management role schedule?”
Tell an agent
Fetch the eligibility activated for entitlement management schedule {schedule}.
Resolve the eligible assignment behind entitlement management role schedule {schedule}.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/appScope
Get the app scope of an entitlement management schedule · Get appScope from roleManagement
#
Ask an LLM
“Is an entitlement management assignment schedule limited to an app?”
“Can I read the app scope on an entitlement management role schedule?”
Tell an agent
Fetch the app scope for entitlement management assignment schedule {schedule}.
Resolve which app entitlement management role schedule {schedule} is limited to.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/directoryScope
Get the scope object of an entitlement management schedule · Get directoryScope from roleManagement
#
Ask an LLM
“What object does an entitlement management assignment schedule apply to?”
“Can I resolve the scope of an entitlement management role schedule?”
Tell an agent
Fetch the scope object for entitlement management assignment schedule {schedule}.
Resolve the object entitlement management role schedule {schedule} applies to.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/principal
Get the principal of an entitlement management schedule · Get principal from roleManagement
#
Ask an LLM
“Who is an entitlement management assignment schedule for?”
“Can I resolve the principal on an entitlement management role schedule?”
Tell an agent
Fetch the principal for entitlement management assignment schedule {schedule}.
Resolve who entitlement management role schedule {schedule} covers.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules/{unifiedRoleAssignmentSchedule-id}/roleDefinition
Get the role of an entitlement management schedule · Get roleDefinition from roleManagement
#
Ask an LLM
“What role does an entitlement management assignment schedule confer?”
“Which role definition does an entitlement management assignment schedule point to?”
Tell an agent
Fetch the role definition for entitlement management assignment schedule {schedule}.
Resolve which role entitlement management role schedule {schedule} confers.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules/$count
Count entitlement management role assignment schedules · Get the number of the resource
#
Ask an LLM
“What is the total of entitlement management assignment schedules?”
“Can I get only a number of entitlement management role schedules?”
Tell an agent
Return the entitlement management assignment schedule total.
Get a count of entitlement management assignment schedules.
GET
/roleManagement/entitlementManagement/roleAssignmentSchedules/microsoft.graph.filterByCurrentUser(on='{on}')
List my entitlement management role assignment schedules · Invoke function filterByCurrentUser
#
Ask an LLM
“Which entitlement management assignment schedules am I the principal on?”
“Can I see only my own entitlement management role schedules?”
Tell an agent
Find my entitlement management assignment schedules by {on}.
Return entitlement management role schedules for me as {on}.
GET
/roleManagement/entitlementManagement/roleDefinitions
List entitlement management role definitions · List roleDefinitions
#
Ask an LLM
“What roles does entitlement management offer, like catalog creator or access package manager?”
“Can I narrow entitlement management role definitions to built-in ones?”
Tell an agent
Enumerate entitlement management role definitions.
Find entitlement management role definitions where {filter}.
POST
/roleManagement/entitlementManagement/roleDefinitions
Create an entitlement management role definition · Create new navigation property to roleDefinitions for roleManagement
#
Ask an LLM
“Can I define a new role for entitlement management?”
“What permissions can a new entitlement management role definition carry?”
Tell an agent
Define entitlement management role {name} with permissions {permissions}.
Add an entitlement management role definition {name} from template {template}.
GET
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}
Get an entitlement management role definition · Get roleDefinitions from roleManagement
#
Ask an LLM
“What permissions come with a given entitlement management role?”
“Can I fetch one entitlement management role definition?”
Tell an agent
Fetch entitlement management role definition {role}.
Look up permissions of entitlement management role {role}.
PATCH
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}
Update an entitlement management role definition · Update the navigation property roleDefinitions in roleManagement
#
Ask an LLM
“Can I edit the permissions on an entitlement management role?”
“Is it possible to switch off an entitlement management role definition?”
Tell an agent
Set permissions {permissions} on entitlement management role {role}.
Switch entitlement management role {role} enabled flag to {enabled}.
DELETE
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}
Delete an entitlement management role definition · Delete navigation property roleDefinitions for roleManagement
#
Ask an LLM
“Can I drop an entitlement management role definition?”
“What do I need to delete an entitlement management role definition?”
Tell an agent destructive · confirm first
Drop entitlement management role definition {role}.
Delete entitlement management role {role}.
GET
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom
List roles an entitlement management role inherits from · Get inheritsPermissionsFrom from roleManagement
#
Ask an LLM
“What roles does an entitlement management role inherit its permissions from?”
“Can I enumerate the parents of an entitlement management role definition?”
Tell an agent
Enumerate parent roles of entitlement management role {role}.
Return inherited definitions for entitlement management role {role}.
POST
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom
Add an inherited role to an entitlement management role · Create new navigation property to inheritsPermissionsFrom for roleManagement
#
Ask an LLM
“Can I attach a parent role to an entitlement management role definition?”
“Is adding an inherits-from entry to an entitlement management role supported?”
Tell an agent
Attach parent role {name} to entitlement management role {role}.
Create an inherited entry on entitlement management role {role} carrying permissions {permissions}.
GET
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}
Get one role an entitlement management role inherits from · Get inheritsPermissionsFrom from roleManagement
#
Ask an LLM
“What is inside one parent role of an entitlement management role?”
“Can I fetch a single inherited definition from an entitlement management role?”
Tell an agent
Fetch parent role {parent} of entitlement management role {role}.
Look up inherited definition {parent} on entitlement management role {role}.
PATCH
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}
Update an inherited role on an entitlement management role · Update the navigation property inheritsPermissionsFrom in roleManagement
#
Ask an LLM
“Can I edit a parent role entry on an entitlement management role?”
“What is editable on an inherited entitlement management role entry?”
Tell an agent
Change the description of parent role {parent} on entitlement management role {role} to {description}.
Rename inherited definition {parent} of entitlement management role {role} to {name}.
DELETE
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/{unifiedRoleDefinition-id1}
Remove an inherited role from an entitlement management role · Delete navigation property inheritsPermissionsFrom for roleManagement
#
Ask an LLM
“Can I detach a parent role from an entitlement management role?”
“Which IDs do I need to drop an inherited entitlement management role?”
Tell an agent destructive · confirm first
Detach parent role {parent} from entitlement management role {role}.
Drop inherited definition {parent} on entitlement management role {role}.
GET
/roleManagement/entitlementManagement/roleDefinitions/{unifiedRoleDefinition-id}/inheritsPermissionsFrom/$count
Count roles an entitlement management role inherits from · Get the number of the resource
#
Ask an LLM
“What is the number of parent roles for an entitlement management role?”
“Can I get just an inherited-role count for one entitlement management role?”
Tell an agent
Return the parent role total for entitlement management role {role}.
Get a count of inherited definitions on entitlement management role {role}.
GET
/roleManagement/entitlementManagement/roleDefinitions/$count
Count entitlement management role definitions · Get the number of the resource
#
Ask an LLM
“What is the total of entitlement management role definitions?”
“Can I get only a number of entitlement management roles?”
Tell an agent
Return the entitlement management role definition total.
Get a count of entitlement management roles where {filter}.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances
List entitlement management role eligibility instances · Get roleEligibilityScheduleInstances from roleManagement
#
Ask an LLM
“Who is currently eligible for entitlement management roles?”
“Can I enumerate entitlement management eligibility instances?”
Tell an agent
Enumerate entitlement management eligibility instances.
Find entitlement management eligibility instances where {filter}.
POST
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances
Create an entitlement management role eligibility instance · Create new navigation property to roleEligibilityScheduleInstances for…
#
Ask an LLM
“Can I add an entitlement management eligibility instance directly?”
“What time window does a new entitlement management eligibility instance accept?”
Tell an agent
Add an entitlement management eligibility instance on schedule {schedule} running {start} to {end}.
Create an entitlement management eligibility instance for member type {memberType}.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}
Get an entitlement management role eligibility instance · Get roleEligibilityScheduleInstances from roleManagement
#
Ask an LLM
“What details come back for one entitlement management eligibility instance?”
“Can I fetch a single entitlement management role eligibility instance?”
Tell an agent
Fetch entitlement management eligibility instance {instance}.
Look up the window of entitlement management eligibility instance {instance}.
PATCH
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}
Update an entitlement management role eligibility instance · Update the navigation property roleEligibilityScheduleInstances in…
#
Ask an LLM
“Can I shorten an entitlement management eligibility instance?”
“What can be edited on an entitlement management role eligibility instance?”
Tell an agent
Move the end of entitlement management eligibility instance {instance} to {end}.
Change the start of entitlement management eligibility instance {instance} to {start}.
DELETE
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}
Delete an entitlement management role eligibility instance · Delete navigation property roleEligibilityScheduleInstances for roleManagement
#
Ask an LLM
“Can I drop an entitlement management eligibility instance?”
“Which ID deletes an entitlement management role eligibility instance?”
Tell an agent destructive · confirm first
Drop entitlement management eligibility instance {instance}.
Delete entitlement management role eligibility instance {instance}.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/appScope
Get the app scope of an entitlement eligibility instance · Get appScope from roleManagement
#
Ask an LLM
“Is an entitlement management eligibility instance limited to an app?”
“Can I read app scope details for an entitlement management eligibility instance?”
Tell an agent
Fetch the app scope for entitlement management eligibility instance {instance}.
Resolve which app entitlement management eligibility instance {instance} is limited to.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/directoryScope
Get the scope object of an entitlement eligibility instance · Get directoryScope from roleManagement
#
Ask an LLM
“What object does an entitlement management eligibility instance apply to?”
“Can I resolve the scope of an entitlement management eligibility instance?”
Tell an agent
Fetch the scope object for entitlement management eligibility instance {instance}.
Resolve the object entitlement management eligibility instance {instance} applies to.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/principal
Get the principal of an entitlement eligibility instance · Get principal from roleManagement
#
Ask an LLM
“Who is eligible under an entitlement management eligibility instance?”
“Can I resolve the user behind an entitlement management eligibility instance?”
Tell an agent
Fetch the principal for entitlement management eligibility instance {instance}.
Resolve who is eligible under entitlement management instance {instance}.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstance-id}/roleDefinition
Get the role of an entitlement eligibility instance · Get roleDefinition from roleManagement
#
Ask an LLM
“What role does an entitlement management eligibility instance make someone eligible for?”
“Can I resolve the role definition of an entitlement management eligibility instance?”
Tell an agent
Fetch the role definition for entitlement management eligibility instance {instance}.
Resolve which role entitlement management eligibility instance {instance} covers.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/$count
Count entitlement management role eligibility instances · Get the number of the resource
#
Ask an LLM
“What is the total of entitlement management eligibility instances?”
“Can I get just a number of entitlement management eligibilities?”
Tell an agent
Return the entitlement management eligibility instance total.
Get a count of entitlement management role eligibility instances.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleInstances/microsoft.graph.filterByCurrentUser(on='{on}')
List my entitlement management role eligibility instances · Invoke function filterByCurrentUser
#
Ask an LLM
“Which entitlement management roles am I eligible for?”
“Can I see only my own entitlement management eligibility instances?”
Tell an agent
Find my entitlement management eligibility instances by {on}.
Return entitlement management eligibility instances for me as {on}.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests
List entitlement management role eligibility requests · Get roleEligibilityScheduleRequests from roleManagement
#
Ask an LLM
“What PIM eligibility requests exist for entitlement management roles?”
“Can I enumerate entitlement management eligibility requests and their status?”
Tell an agent
Enumerate entitlement management role eligibility requests.
Find entitlement management eligibility requests where {filter}.
POST
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests
Request an entitlement management role eligibility · Create new navigation property to roleEligibilityScheduleRequests for…
#
Ask an LLM
“Can I make someone eligible for an entitlement management role through PIM?”
“Does an entitlement management eligibility request accept a justification?”
Tell an agent
Submit an entitlement management eligibility request for {principal} on role {role} with action {action}.
Request entitlement management eligibility on {role} for {principal} citing {justification}.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}
Get an entitlement management role eligibility request · Get roleEligibilityScheduleRequests from roleManagement
#
Ask an LLM
“What is the status of a given entitlement management eligibility request?”
“Can I fetch a single PIM eligibility request for an entitlement management role?”
Tell an agent
Fetch entitlement management eligibility request {request}.
Look up status of entitlement management eligibility request {request}.
PATCH
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}
Update an entitlement management role eligibility request · Update the navigation property roleEligibilityScheduleRequests in roleManagement
#
Ask an LLM
“Can I edit an entitlement management eligibility request after submitting it?”
“What is editable on an entitlement management eligibility request?”
Tell an agent
Change the justification of entitlement management eligibility request {request} to {justification}.
Set ticket {ticket} on entitlement management eligibility request {request}.
DELETE
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}
Delete an entitlement management role eligibility request · Delete navigation property roleEligibilityScheduleRequests for roleManagement
#
Ask an LLM
“Can I drop an entitlement management eligibility request record?”
“Which ID deletes an entitlement management eligibility request?”
Tell an agent destructive · confirm first
Drop entitlement management eligibility request {request}.
Delete entitlement management role eligibility request {request}.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/appScope
Get the app scope of an entitlement eligibility request · Get appScope from roleManagement
#
Ask an LLM
“Is an entitlement management eligibility request limited to an app?”
“Can I read the app scope on an entitlement management eligibility request?”
Tell an agent
Fetch the app scope for entitlement management eligibility request {request}.
Resolve which app entitlement management eligibility request {request} is limited to.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/directoryScope
Get the scope object of an entitlement eligibility request · Get directoryScope from roleManagement
#
Ask an LLM
“What object is an entitlement management eligibility request scoped to?”
“Can I resolve the scope of an entitlement management eligibility request?”
Tell an agent
Fetch the scope object for entitlement management eligibility request {request}.
Resolve the object entitlement management eligibility request {request} is scoped to.
POST
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/microsoft.graph.cancel
Cancel an entitlement management role eligibility request · Invoke action cancel
#
Ask an LLM
“Can I cancel an entitlement management eligibility request that was granted?”
“Is there a way to call off a granted entitlement management eligibility request?”
Tell an agent destructive · confirm first
Cancel entitlement management eligibility request {request}.
Call off granted entitlement management eligibility request {request}.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/principal
Get the principal of an entitlement eligibility request · Get principal from roleManagement
#
Ask an LLM
“Who is an entitlement management eligibility request for?”
“Can I resolve the principal on an entitlement management eligibility request?”
Tell an agent
Fetch the principal for entitlement management eligibility request {request}.
Resolve who entitlement management eligibility request {request} is for.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/roleDefinition
Get the role in an entitlement eligibility request · Get roleDefinition from roleManagement
#
Ask an LLM
“What role is asked for in an entitlement management eligibility request?”
“Can I resolve the role definition of an entitlement management eligibility request?”
Tell an agent
Fetch the role definition for entitlement management eligibility request {request}.
Resolve which role entitlement management eligibility request {request} asks for.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequest-id}/targetSchedule
Get target schedule of an entitlement eligibility request · Get targetSchedule from roleManagement
#
Ask an LLM
“Which schedule does an entitlement management eligibility request point at?”
“Can I resolve the target schedule of an entitlement management eligibility request?”
Tell an agent
Fetch the target schedule for entitlement management eligibility request {request}.
Resolve the schedule entitlement management eligibility request {request} targets.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/$count
Count entitlement management role eligibility requests · Get the number of the resource
#
Ask an LLM
“What is the total of entitlement management eligibility requests?”
“Can I get just a number of entitlement management eligibility requests?”
Tell an agent
Return the entitlement management eligibility request total.
Get a count of entitlement management role eligibility requests.
GET
/roleManagement/entitlementManagement/roleEligibilityScheduleRequests/microsoft.graph.filterByCurrentUser(on='{on}')
List my entitlement management role eligibility requests · Invoke function filterByCurrentUser
#
Ask an LLM
“Which entitlement management eligibility requests have I created or approved?”
“Can I see only my own entitlement management eligibility requests?”
Tell an agent
Find my entitlement management eligibility requests by {on}.
Return entitlement management eligibility requests for me as {on}.
GET
/roleManagement/entitlementManagement/roleEligibilitySchedules
List entitlement management role eligibility schedules · Get roleEligibilitySchedules from roleManagement
#
Ask an LLM
“What eligibility schedules does entitlement management have?”
“Can I enumerate entitlement management eligibility schedules and their expiry?”
Tell an agent
Enumerate entitlement management role eligibility schedules.
Find entitlement management eligibility schedules where {filter}.
POST
/roleManagement/entitlementManagement/roleEligibilitySchedules
Create an entitlement management role eligibility schedule · Create new navigation property to roleEligibilitySchedules for roleManagement
#
Ask an LLM
“Can I add an entitlement management eligibility schedule directly?”
“What does a new entitlement management eligibility schedule require?”
Tell an agent
Add an entitlement management eligibility schedule using schedule info {info}.
Create an entitlement management eligibility schedule for member type {memberType}.
GET
/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}
Get an entitlement management role eligibility schedule · Get roleEligibilitySchedules from roleManagement
#
Ask an LLM
“What does a single entitlement management eligibility schedule show?”
“Can I fetch one entitlement management role eligibility schedule?”
Tell an agent
Fetch entitlement management eligibility schedule {schedule}.
Look up expiry of entitlement management eligibility schedule {schedule}.
PATCH
/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}
Update an entitlement management role eligibility schedule · Update the navigation property roleEligibilitySchedules in roleManagement
#
Ask an LLM
“Can I edit the timing of an entitlement management eligibility schedule?”
“What is editable on an entitlement management role eligibility schedule?”
Tell an agent
Set schedule info {info} on entitlement management eligibility schedule {schedule}.
Change member type of entitlement management eligibility schedule {schedule} to {memberType}.
DELETE
/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}
Delete an entitlement management role eligibility schedule · Delete navigation property roleEligibilitySchedules for roleManagement
#
Ask an LLM
“Can I drop an entitlement management eligibility schedule?”
“Which ID deletes an entitlement management role eligibility schedule?”
Tell an agent destructive · confirm first
Drop entitlement management eligibility schedule {schedule}.
Delete entitlement management role eligibility schedule {schedule}.
GET
/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/appScope
Get the app scope of an entitlement eligibility schedule · Get appScope from roleManagement
#
Ask an LLM
“Is an entitlement management eligibility schedule limited to an app?”
“Can I read the app scope on an entitlement management eligibility schedule?”
Tell an agent
Fetch the app scope for entitlement management eligibility schedule {schedule}.
Resolve which app entitlement management eligibility schedule {schedule} is limited to.
GET
/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/directoryScope
Get the scope object of an entitlement eligibility schedule · Get directoryScope from roleManagement
#
Ask an LLM
“What object does an entitlement management eligibility schedule apply to?”
“Can I resolve the scope of an entitlement management eligibility schedule?”
Tell an agent
Fetch the scope object for entitlement management eligibility schedule {schedule}.
Resolve the object entitlement management eligibility schedule {schedule} applies to.
GET
/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/principal
Get the principal of an entitlement eligibility schedule · Get principal from roleManagement
#
Ask an LLM
“Who is an entitlement management eligibility schedule for?”
“Can I resolve the principal on an entitlement management eligibility schedule?”
Tell an agent
Fetch the principal for entitlement management eligibility schedule {schedule}.
Resolve who entitlement management eligibility schedule {schedule} covers.
GET
/roleManagement/entitlementManagement/roleEligibilitySchedules/{unifiedRoleEligibilitySchedule-id}/roleDefinition
Get the role of an entitlement eligibility schedule · Get roleDefinition from roleManagement
#
Ask an LLM
“What role does an entitlement management eligibility schedule make someone eligible for?”
“Can I resolve the role definition on an entitlement management eligibility schedule?”
Tell an agent
Fetch the role definition for entitlement management eligibility schedule {schedule}.
Resolve which role entitlement management eligibility schedule {schedule} covers.
GET
/roleManagement/entitlementManagement/roleEligibilitySchedules/$count
Count entitlement management role eligibility schedules · Get the number of the resource
#
Ask an LLM
“What is the total of entitlement management eligibility schedules?”
“Can I get only a number of entitlement management eligibility schedules?”
Tell an agent
Return the entitlement management eligibility schedule total.
Get a count of entitlement management role eligibility schedules.
GET
/roleManagement/entitlementManagement/roleEligibilitySchedules/microsoft.graph.filterByCurrentUser(on='{on}')
List my entitlement management role eligibility schedules · Invoke function filterByCurrentUser
#
Ask an LLM
“Which entitlement management eligibility schedules am I the principal on?”
“Can I see only my own entitlement management eligibility schedules?”
Tell an agent
Find my entitlement management eligibility schedules by {on}.
Return entitlement management eligibility schedules for me as {on}.