owners

Creates, updates, deletes, gets or lists an owners resource.

Overview

Name	owners
Type	Resource
Id	entra_id.applications.owners

Fields

The following fields are returned by SELECT queries:

list

Retrieved collection

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
deletedDateTime	string (date-time)	Date and time when this object was deleted. Always null when the object hasn't been deleted. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list	select	application_id	ConsistencyLevel	Retrieve a list of owners for an application that are directoryObject types.
add_ref	insert	application_id		Add an owner to an application. Application owners can be individual users, the associated service principal, or another service principal.
remove_ref	delete	application_id, directory_object_id	If-Match	Remove an owner from an application. As a recommended best practice, apps should have at least two owners.
remove_ref_2	delete	application_id	If-Match	Remove an owner from an application. As a recommended best practice, apps should have at least two owners.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
application_id	string	The unique identifier of application
directory_object_id	string	The unique identifier of directoryObject
ConsistencyLevel	string	Indicates the requested consistency level. Documentation URL: https://docs.microsoft.com/graph/aad-advanced-queries
If-Match	string	ETag

SELECT examples

list

Retrieve a list of owners for an application that are directoryObject types.

SELECT
id,
deletedDateTime
FROM entra_id.applications.owners
WHERE application_id = '{{ application_id }}' -- required
AND ConsistencyLevel = '{{ ConsistencyLevel }}'
;

INSERT examples

add_ref

Add an owner to an application. Application owners can be individual users, the associated service principal, or another service principal.

INSERT INTO entra_id.applications.owners (
directoryObjectId,
application_id
)
SELECT 
'{{ directoryObjectId }}',
'{{ application_id }}'
;

Manifest

# Description fields are for documentation purposes
- name: owners
props:
  - name: application_id
    value: "{{ application_id }}"
    description: Required parameter for the owners resource.
  - name: directoryObjectId
    value: "{{ directoryObjectId }}"
    description: |
      The id of the directory object to reference (a user, group, service principal, device, ...). Sent on the wire as '@odata.id': 'https://graph.microsoft.com/v1.0/directoryObjects/{id}'.

DELETE examples

remove_ref

Remove an owner from an application. As a recommended best practice, apps should have at least two owners.

DELETE FROM entra_id.applications.owners
WHERE application_id = '{{ application_id }}' --required
AND directory_object_id = '{{ directory_object_id }}' --required
AND If-Match = '{{ If-Match }}'
;

remove_ref_2

Remove an owner from an application. As a recommended best practice, apps should have at least two owners.

DELETE FROM entra_id.applications.owners
AND application_id = '{{ application_id }}' --required
AND If-Match = '{{ If-Match }}'
;