AppRoleAssignment

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/AppRoleAssignment",
  "title": "AppRoleAssignment",
  "allOf": [
    {
      "$ref": "#/components/schemas/DirectoryObject"
    },
    {
      "title": "appRoleAssignment",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "appRoleId": {
          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
          "type": "string",
          "description": "The identifier (id) for the app role that's assigned to the principal. This app role must be exposed in the appRoles property on the resource application's service principal (resourceId). If the resource application hasn't declared any app roles, a default app role ID of 00000000-0000-0000-0000-000000000000 can be specified to signal that the principal is assigned to the resource app without any specific app roles. Required on create.",
          "format": "uuid"
        },
        "createdDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The time when the app role assignment was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.",
          "format": "date-time",
          "nullable": true
        },
        "principalDisplayName": {
          "type": "string",
          "description": "The display name of the user, group, or service principal that was granted the app role assignment. Maximum length is 256 characters. Read-only. Supports $filter (eq and startswith).",
          "nullable": true
        },
        "principalId": {
          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
          "type": "string",
          "description": "The unique identifier (id) for the user, security group, or service principal being granted the app role. Security groups with dynamic memberships are supported. Required on create.",
          "format": "uuid",
          "nullable": true
        },
        "principalType": {
          "type": "string",
          "description": "The type of the assigned principal. This can either be User, Group, or ServicePrincipal. Read-only.",
          "nullable": true
        },
        "resourceDisplayName": {
          "type": "string",
          "description": "The display name of the resource app's service principal to which the assignment is made. Maximum length is 256 characters.",
          "nullable": true
        },
        "resourceId": {
          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
          "type": "string",
          "description": "The unique identifier (id) for the resource service principal for which the assignment is made. Required on create. Supports $filter (eq only).",
          "format": "uuid",
          "nullable": true
        },
        "@odata.type": {
          "type": "string",
          "default": "#microsoft.graph.appRoleAssignment"
        }
      }
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.appRoleAssignment"
}