Microsoft Graph

Microsoft Graph deviceManagement.roleDefinition API

The deviceManagement.roleDefinition API from Microsoft Graph — 7 operation(s) for devicemanagement.roledefinition.

Documentation GitHub OpenAPI

Operations 13

GET /deviceManagement/roleDefinitions Microsoft Graph Get roleDefinitions from deviceManagement #

POST /deviceManagement/roleDefinitions Microsoft Graph Create new navigation property to roleDefinitions for deviceManagement #

GET /deviceManagement/roleDefinitions/{roleDefinition-id} Microsoft Graph Get roleDefinitions from deviceManagement #

PATCH /deviceManagement/roleDefinitions/{roleDefinition-id} Microsoft Graph Update the navigation property roleDefinitions in deviceManagement #

DELETE /deviceManagement/roleDefinitions/{roleDefinition-id} Microsoft Graph Delete navigation property roleDefinitions for deviceManagement #

GET /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments Microsoft Graph Get roleAssignments from deviceManagement #

POST /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments Microsoft Graph Create new navigation property to roleAssignments for deviceManagement #

GET /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments/{roleAssignment-id} Microsoft Graph Get roleAssignments from deviceManagement #

PATCH /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments/{roleAssignment-id} Microsoft Graph Update the navigation property roleAssignments in deviceManagement #

DELETE /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments/{roleAssignment-id} Microsoft Graph Delete navigation property roleAssignments for deviceManagement #

GET /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments/{roleAssignment-id}/roleDefinition Microsoft Graph Get roleDefinition from deviceManagement #

GET /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments/$count Microsoft Graph Get the number of the resource #

GET /deviceManagement/roleDefinitions/$count Microsoft Graph Get the number of the resource #

Documentation

https://learn.microsoft.com/en-us/graph/api/resources/admin?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/agreementacceptance?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/agreement?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teamsapp?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/applicationtemplate?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/azure-ad-auditlog-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodconfiguration?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodspolicy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/certificatebasedauthconfiguration?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/chat?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/communications-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/complianceapioverview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-externalconnection?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/contact?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/contract?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/copilot-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/datapolicyoperation?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/intune-apps-conceptual?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/intune-device-conceptual?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/device?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/directory?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/domaindnsrecord?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/domain?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/drive?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/education-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/employee-experience-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/externalconnectors-external?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/filter-query-parameter

https://learn.microsoft.com/en-us/graph/api/resources/excel?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/grouplifecyclepolicy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groups-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groupsetting?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/groupsettingtemplate?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/identitycontainer?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/informationprotection?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/invitation?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/users?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/oauth2permissiongrant?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/organization?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/resourcespecificpermissiongrant?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/place?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/planner-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/policy-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/print?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/privacy?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/report?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/rolemanagement?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/schemaextension?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/scopedrolemembership?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/search-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/shares?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/sharepoint?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/solutions-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/filestorage?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/subscribedsku?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/subscription?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teams-api-overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/teamwork?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/tenantrelationship?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/auth/auth-concepts

https://learn.microsoft.com/en-us/graph/api/resources/workplace?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0

https://learn.microsoft.com/en-us/graph/api/resources/sitepage?view=graph-rest-1.0

Specifications

https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-devicemanagement-roledefinition-api-openapi.yml

Other Resources

https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/graphql/microsoft-graph-graphql.md

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/microsoft-graph-devicemanagement-roledefinition-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Microsoft Graph Admin Admin.admin Device Management.role Definition API
  description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID.

    This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations,

    site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements,

    SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.'
  version: 1.0.0
  contact:
    name: Microsoft Graph API Support
    url: https://developer.microsoft.com/graph
servers:
- url: https://graph.microsoft.com/v1.0
  description: Microsoft Graph API v1.0 endpoint
tags:
- name: deviceManagement.roleDefinition
paths:
  /deviceManagement/roleDefinitions:
    description: Provides operations to manage the roleDefinitions property of the microsoft.graph.deviceManagement entity.
    get:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Get roleDefinitions from deviceManagement
      description: The Role Definitions.
      operationId: deviceManagement.ListRoleDefinitions
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.roleDefinitionCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Create new navigation property to roleDefinitions for deviceManagement
      operationId: deviceManagement.CreateRoleDefinitions
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.roleDefinition'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.roleDefinition'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /deviceManagement/roleDefinitions/{roleDefinition-id}:
    description: Provides operations to manage the roleDefinitions property of the microsoft.graph.deviceManagement entity.
    parameters:
    - name: roleDefinition-id
      in: path
      description: The unique identifier of roleDefinition
      required: true
      schema:
        type: string
      x-ms-docs-key-type: roleDefinition
    get:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Get roleDefinitions from deviceManagement
      description: The Role Definitions.
      operationId: deviceManagement.GetRoleDefinitions
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.roleDefinition'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Update the navigation property roleDefinitions in deviceManagement
      operationId: deviceManagement.UpdateRoleDefinitions
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.roleDefinition'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.roleDefinition'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Delete navigation property roleDefinitions for deviceManagement
      operationId: deviceManagement.DeleteRoleDefinitions
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments:
    description: Provides operations to manage the roleAssignments property of the microsoft.graph.roleDefinition entity.
    parameters:
    - name: roleDefinition-id
      in: path
      description: The unique identifier of roleDefinition
      required: true
      schema:
        type: string
      x-ms-docs-key-type: roleDefinition
    get:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Get roleAssignments from deviceManagement
      description: List of Role assignments for this role definition.
      operationId: deviceManagement.roleDefinitions.ListRoleAssignments
      parameters:
      - $ref: '#/components/parameters/top'
      - $ref: '#/components/parameters/skip'
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      - $ref: '#/components/parameters/count'
      - name: $orderby
        in: query
        description: Order items by property values
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          $ref: '#/components/responses/microsoft.graph.roleAssignmentCollectionResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-pageable:
        nextLinkName: '@odata.nextLink'
        operationName: listMore
      x-ms-docs-operation-type: operation
    post:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Create new navigation property to roleAssignments for deviceManagement
      operationId: deviceManagement.roleDefinitions.CreateRoleAssignments
      requestBody:
        description: New navigation property
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.roleAssignment'
        required: true
      responses:
        2XX:
          description: Created navigation property.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.roleAssignment'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments/{roleAssignment-id}:
    description: Provides operations to manage the roleAssignments property of the microsoft.graph.roleDefinition entity.
    parameters:
    - name: roleDefinition-id
      in: path
      description: The unique identifier of roleDefinition
      required: true
      schema:
        type: string
      x-ms-docs-key-type: roleDefinition
    - name: roleAssignment-id
      in: path
      description: The unique identifier of roleAssignment
      required: true
      schema:
        type: string
      x-ms-docs-key-type: roleAssignment
    get:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Get roleAssignments from deviceManagement
      description: List of Role assignments for this role definition.
      operationId: deviceManagement.roleDefinitions.GetRoleAssignments
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.roleAssignment'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    patch:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Update the navigation property roleAssignments in deviceManagement
      operationId: deviceManagement.roleDefinitions.UpdateRoleAssignments
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.roleAssignment'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.roleAssignment'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
    delete:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Delete navigation property roleAssignments for deviceManagement
      operationId: deviceManagement.roleDefinitions.DeleteRoleAssignments
      parameters:
      - name: If-Match
        in: header
        description: ETag
        schema:
          type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments/{roleAssignment-id}/roleDefinition:
    description: Provides operations to manage the roleDefinition property of the microsoft.graph.roleAssignment entity.
    parameters:
    - name: roleDefinition-id
      in: path
      description: The unique identifier of roleDefinition
      required: true
      schema:
        type: string
      x-ms-docs-key-type: roleDefinition
    - name: roleAssignment-id
      in: path
      description: The unique identifier of roleAssignment
      required: true
      schema:
        type: string
      x-ms-docs-key-type: roleAssignment
    x-ms-docs-grouped-path:
    - /deviceManagement/roleAssignments/{deviceAndAppManagementRoleAssignment-id}/roleDefinition
    get:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Get roleDefinition from deviceManagement
      description: Indicates the role definition for this role assignment.
      operationId: deviceManagement.roleDefinitions.roleAssignments.GetRoleDefinition
      parameters:
      - name: $select
        in: query
        description: Select properties to be returned
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      - name: $expand
        in: query
        description: Expand related entities
        style: form
        explode: false
        schema:
          uniqueItems: true
          type: array
          items:
            type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.roleDefinition'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      x-ms-docs-operation-type: operation
  /deviceManagement/roleDefinitions/{roleDefinition-id}/roleAssignments/$count:
    description: Provides operations to count the resources in the collection.
    parameters:
    - name: roleDefinition-id
      in: path
      description: The unique identifier of roleDefinition
      required: true
      schema:
        type: string
      x-ms-docs-key-type: roleDefinition
    get:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Get the number of the resource
      operationId: deviceManagement.roleDefinitions.roleAssignments.GetCount-3dca
      parameters:
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
  /deviceManagement/roleDefinitions/$count:
    description: Provides operations to count the resources in the collection.
    get:
      tags:
      - deviceManagement.roleDefinition
      summary: Microsoft Graph Get the number of the resource
      operationId: deviceManagement.roleDefinitions.GetCount-031b
      parameters:
      - $ref: '#/components/parameters/search'
      - $ref: '#/components/parameters/filter'
      responses:
        2XX:
          $ref: '#/components/responses/ODataCountResponse'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
components:
  schemas:
    ODataCountResponse:
      type: integer
      format: int32
    microsoft.graph.ODataErrors.ErrorDetails:
      required:
      - code
      - message
      type: object
      properties:
        code:
          type: string
        message:
          type: string
        target:
          type: string
          nullable: true
    microsoft.graph.roleDefinition:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: roleDefinition
        required:
        - '@odata.type'
        type: object
        properties:
          description:
            type: string
            description: Description of the Role definition.
            nullable: true
          displayName:
            type: string
            description: Display Name of the Role definition.
            nullable: true
          isBuiltIn:
            type: boolean
            description: Type of Role. Set to True if it is built-in, or set to False if it is a custom role definition.
          rolePermissions:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.rolePermission'
            description: List of Role Permissions this role is allowed to perform. These must match the actionName that is defined as part of the rolePermission.
          roleAssignments:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.roleAssignment'
            description: List of Role assignments for this role definition.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
        description: The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role.
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.deviceAndAppManagementRoleDefinition': '#/components/schemas/microsoft.graph.deviceAndAppManagementRoleDefinition'
    microsoft.graph.roleDefinitionCollectionResponse:
      title: Collection of roleDefinition
      type: object
      allOf:
      - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
      - type: object
        properties:
          value:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.roleDefinition'
    microsoft.graph.roleAssignment:
      allOf:
      - $ref: '#/components/schemas/microsoft.graph.entity'
      - title: roleAssignment
        required:
        - '@odata.type'
        type: object
        properties:
          description:
            type: string
            description: 'Indicates the description of the role assignment. For example: ''All administrators, employees and scope tags associated with the Houston office.'' Max length is 1024 characters.'
            nullable: true
          displayName:
            type: string
            description: 'Indicates the display name of the role assignment. For example: ''Houston administrators and users''. Max length is 128 characters.'
            nullable: true
          resourceScopes:
            type: array
            items:
              type: string
              nullable: true
            description: 'Indicates the list of resource scope security group Entra IDs. For example: {dec942f4-6777-4998-96b4-522e383b08e2}.'
          roleDefinition:
            anyOf:
            - $ref: '#/components/schemas/microsoft.graph.roleDefinition'
            - type: object
              nullable: true
            description: Indicates the role definition for this role assignment.
            x-ms-navigationProperty: true
          '@odata.type':
            type: string
        description: The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles.
        discriminator:
          propertyName: '@odata.type'
          mapping:
            '#microsoft.graph.deviceAndAppManagementRoleAssignment': '#/components/schemas/microsoft.graph.deviceAndAppManagementRoleAssignment'
    microsoft.graph.resourceAction:
      title: resourceAction
      required:
      - '@odata.type'
      type: object
      properties:
        allowedResourceActions:
          type: array
          items:
            type: string
            nullable: true
          description: Allowed Actions
        notAllowedResourceActions:
          type: array
          items:
            type: string
            nullable: true
          description: Not Allowed Actions.
        '@odata.type':
          type: string
      description: Set of allowed and not allowed actions for a resource.
    microsoft.graph.ODataErrors.InnerError:
      title: InnerError
      required:
      - '@odata.type'
      type: object
      properties:
        request-id:
          type: string
          description: Request Id as tracked internally by the service
          nullable: true
        client-request-id:
          type: string
          description: Client request Id as sent by the client application.
          nullable: true
        date:
          pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$
          type: string
          description: Date when the error occured.
          format: date-time
          nullable: true
        '@odata.type':
          type: string
    microsoft.graph.rolePermission:
      title: rolePermission
      required:
      - '@odata.type'
      type: object
      properties:
        resourceActions:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.resourceAction'
          description: Resource Actions each containing a set of allowed and not allowed permissions.
        '@odata.type':
          type: string
      description: Contains the set of ResourceActions determining the allowed and not allowed permissions for each role.
    microsoft.graph.ODataErrors.MainError:
      required:
      - code
      - message
      type: object
      properties:
        code:
          type: string
        message:
          type: string
          x-ms-primary-error-message: true
        target:
          type: string
          nullable: true
        details:
          type: array
          items:
            $ref: '#/components/schemas/microsoft.graph.ODataErrors.ErrorDetails'
        innerError:
          $ref: '#/components/schemas/microsoft.graph.ODataErrors.InnerError'
    microsoft.graph.roleAssignmentCollectionResponse:
      title: Collection of roleAssignment
      type: object
      allOf:
      - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse'
      - type: object
        properties:
          value:
            type: array
            items:
              $ref: '#/components/schemas/microsoft.graph.roleAssignment'
    BaseCollectionPaginationCountResponse:
      title: Base collection pagination and count responses
      type: object
      properties:
        '@odata.count':
          type: integer
          format: int64
          nullable: true
        '@odata.nextLink':
          type: string
          nullable: true
    microsoft.graph.ODataErrors.ODataError:
      required:
      - error
      type: object
      properties:
        error:
          $ref: '#/components/schemas/microsoft.graph.ODataErrors.MainError'
    microsoft.graph.entity:
      title: entity
      required:
      - '@odata.type'
      type: object
      properties:
        id:
          type: string
          description: The unique identifier for an entity. Read-only.
        '@odata.type':
          type: string
      discriminator:
        propertyName: '@odata.type'
        mapping:
          '#microsoft.graph.accessPackage': '#/components/schemas/microsoft.graph.accessPackage'
          '#microsoft.graph.accessPackageAssignment': '#/components/schemas/microsoft.graph.accessPackageAssignment'
          '#microsoft.graph.accessPackageAssignmentPolicy': '#/components/schemas/microsoft.graph.accessPackageAssignmentPolicy'
          '#microsoft.graph.accessPackageAssignmentRequest': '#/components/schemas/microsoft.graph.accessPackageAssignmentRequest'
          '#microsoft.graph.accessPackageCatalog': '#/components/schemas/microsoft.graph.accessPackageCatalog'
          '#microsoft.graph.accessPackageQuestion': '#/components/schemas/microsoft.graph.accessPackageQuestion'
          '#microsoft.graph.accessPackageMultipleChoiceQuestion': '#/components/schemas/microsoft.graph.accessPackageMultipleChoiceQuestion'
          '#microsoft.graph.accessPackageTextInputQuestion': '#/components/schemas/microsoft.graph.accessPackageTextInputQuestion'
          '#microsoft.graph.accessPackageResource': '#/components/schemas/microsoft.graph.accessPackageResource'
          '#microsoft.graph.accessPackageResourceEnvironment': '#/components/schemas/microsoft.graph.accessPackageResourceEnvironment'
          '#microsoft.graph.accessPackageResourceRequest': '#/components/schemas/microsoft.graph.accessPackageResourceRequest'
          '#microsoft.graph.accessPackageResourceRole': '#/components/schemas/microsoft.graph.accessPackageResourceRole'
          '#microsoft.graph.accessPackageResourceRoleScope': '#/components/schemas/microsoft.graph.accessPackageResourceRoleScope'
          '#microsoft.graph.accessPackageResourceScope': '#/components/schemas/microsoft.graph.accessPackageResourceScope'
          '#microsoft.graph.accessPackageSubject': '#/components/schemas/microsoft.graph.accessPackageSubject'
          '#microsoft.graph.accessReviewHistoryDefinition': '#/components/schemas/microsoft.graph.accessReviewHistoryDefinition'
          '#microsoft.graph.accessReviewHistoryInstance': '#/components/schemas/microsoft.graph.accessReviewHistoryInstance'
          '#microsoft.graph.accessReviewInstance': '#/components/schemas/microsoft.graph.accessReviewInstance'
          '#microsoft.graph.accessReviewInstanceDecisionItem': '#/components/schemas/microsoft.graph.accessReviewInstanceDecisionItem'
          '#microsoft.graph.accessReviewReviewer': '#/components/schemas/microsoft.graph.accessReviewReviewer'
          '#microsoft.graph.accessReviewScheduleDefinition': '#/components/schemas/microsoft.graph.accessReviewScheduleDefinition'
          '#microsoft.graph.accessReviewSet': '#/components/schemas/microsoft.graph.accessReviewSet'
          '#microsoft.graph.accessReviewStage': '#/components/schemas/microsoft.graph.accessReviewStage'
          '#microsoft.graph.activitiesContainer': '#/components/schemas/microsoft.graph.activitiesContainer'
          '#microsoft.graph.activityHistoryItem': '#/components/schemas/microsoft.graph.activityHistoryItem'
          '#microsoft.graph.adminConsentRequestPolicy': '#/components/schemas/microsoft.graph.adminConsentRequestPolicy'
          '#microsoft.graph.adminMicrosoft365Apps': '#/components/schemas/microsoft.graph.adminMicrosoft365Apps'
          '#microsoft.graph.adminReportSettings': '#/components/schemas/microsoft.graph.adminReportSettings'
          '#microsoft.graph.agreement': '#/components/schemas/microsoft.graph.agreement'
          '#microsoft.graph.agreementAcceptance': '#/components/schemas/microsoft.graph.agreementAcceptance'
          '#microsoft.graph.agreementFileProperties': '#/components/schemas/microsoft.graph.agreementFileProperties'
          '#microsoft.graph.agreementFile': '#/components/schemas/microsoft.graph.agreementFile'
          '#microsoft.graph.agreementFileLocalization': '#/components/schemas/microsoft.graph.agreementFileLocalization'
          '#microsoft.graph.agreementFileVersion': '#/components/schemas/microsoft.graph.agreementFileVersion'
          '#microsoft.graph.aiInteraction': '#/components/schemas/microsoft.graph.aiInteraction'
          '#microsoft.graph.aiInteractionHistory': '#/components/schemas/microsoft.graph.aiInteractionHistory'
          '#microsoft.graph.aiUser': '#/components/schemas/microsoft.graph.aiUser'
          '#microsoft.graph.alert': '#/components/schemas/microsoft.graph.alert'
          '#microsoft.graph.allowedValue': '#/components/schemas/microsoft.graph.allowedValue'
          '#microsoft.graph.appCatalogs': '#/components/schemas/microsoft.graph.appCatalogs'
          '#microsoft.graph.appConsentApprovalRoute': '#/components/schemas/microsoft.graph.appConsentApprovalRoute'
          '#microsoft.graph.appConsentRequest': '#/components/schemas/microsoft.graph.appConsentRequest'
          '#microsoft.graph.applePushNotificationCertificate': '#/components/schemas/microsoft.graph.applePushNotificationCertificate'
          '#microsoft.graph.applicationTemplate': '#/components/schemas/microsoft.graph.applicationTemplate'
          '#microsoft.graph.appLogCollectionRequest': '#/components/schemas/microsoft.graph.appLogCollectionRequest'
          '#microsoft.graph.approval': '#/components/schemas/microsoft.graph.approval'
          '#microsoft.graph.approvalStage': '#/components/schemas/microsoft.graph.approvalStage'
          '#microsoft.graph.appScope': '#/components/schemas/microsoft.graph.appScope'
          '#microsoft.graph.attachment': '#/components/schemas/microsoft.graph.attachment'
          '#microsoft.graph.fileAttachment': '#/components/schemas/microsoft.graph.fileAttachment'
          '#microsoft.graph.itemAttachment': '#/components/schemas/microsoft.graph.itemAttachment'
          '#microsoft.graph.referenceAttachment': '#/components/schemas/microsoft.graph.referenceAttachment'
          '#microsoft.graph.attachmentBase': '#/components/schemas/microsoft.graph.attachmentBase'
          '#microsoft.graph.taskFileAttachment': '#/components/schemas/microsoft.graph.taskFileAttachment'
          '#microsoft.graph.attachmentSession': '#/components/schemas/microsoft.graph.attachmentSession'
          '#microsoft.graph.attackSimulationRoot': '#/components/schemas/microsoft.graph.attackSimulationRoot'
          '#microsoft.graph.attendanceRecord': '#/components/schemas/microsoft.graph.attendanceRecord'
          '#microsoft.graph.attributeMappingFunctionSchema': '#/components/schemas/microsoft.graph.attributeMappingFunctionSchema'
          '#microsoft.graph.attributeSet': '#/components/schemas/microsoft.graph.attributeSet'
          '#microsoft.graph.audioRoutingGroup': '#/components/schemas/microsoft.graph.audioRoutingGroup'
          '#microsoft.graph.auditEvent': '#/components/schemas/microsoft.graph.auditEvent'
          '#microsoft.graph.auditLogRoot': '#/components/schemas/microsoft.graph.auditLogRoot'
          '#microsoft.graph.authentication': '#/components/schemas/microsoft.graph.authentication'
          '#microsoft.graph.authenticationCombinationConfiguration': '#/components/schemas/microsoft.graph.authenticationCombinationConfiguration'
          '#microsoft.graph.fido2CombinationConfiguration': '#/components/schemas/microsoft.graph.fido2CombinationConfiguration'
          '#microsoft.graph.x509CertificateCombinationConfiguration': '#/components/schemas/microsoft.graph.x509CertificateCombinationConfiguration'
          '#microsoft.graph.authenticationContextClassReference': '#/components/schemas/microsoft.graph.authenticationContextClassReference'
          '#microsoft.graph.authenticationEventListener': '#/components/schemas/microsoft.graph.authenticationEventListener'
          '#microsoft.graph.onAttributeCollectionListener': '#/components/schemas/microsoft.graph.onAttributeCollectionListener'
          '#microsoft.graph.onAttributeCollectionStartListener': '#/components/schemas/microsoft.graph.onAttributeCollectionStartListener'
          '#microsoft.graph.onAttributeCollectionSubmitListener': '#/components/schemas/microsoft.graph.onAttributeCollectionSubmitListener'
          '#microsoft.graph.onAuthenticationMethodLoadStartListener': '#/components/schemas/microsoft.graph.onAuthenticationMethodLoadStartListener'
          '#microsoft.graph.onEmailOtpSendListener': '#/components/schemas/microsoft.graph.onEmailOtpSendListener'
          '#microsoft.graph.onFraudProtectionLoadStartListener': '#/components/schemas/microsoft.graph.onFraudProtectionLoadStartListener'
          '#microsoft.graph.onInteractiveAuthFlowStartListener': '#/components/schemas/microsoft.graph.onInteractiveAuthFlow

# --- truncated at 32 KB (146 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/microsoft-graph-devicemanagement-roledefinition-api-openapi.yml