entitlement_management_assignments_additional_access

Creates, updates, deletes, gets or lists an entitlement_management_assignments_additional_access resource.

Overview

Name	entitlement_management_assignments_additional_access
Type	Resource
Id	entra_id.identity_governance.entitlement_management_assignments_additional_access

Fields

The following fields are returned by SELECT queries:

get_2

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
accessPackage		Read-only. Nullable. Supports $filter (eq) on the id property and $expand query parameters.
assignmentPolicy		Read-only. Supports $filter (eq) on the id property and $expand query parameters.
customExtensionCalloutInstances	array	Information about all the custom extension calls that were made during the access package assignment workflow.
expiredDateTime	string (date-time)	The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)
schedule		When the access assignment is to be in place. Read-only.
state		The state of the access package assignment. The possible values are: delivering, partiallyDelivered, delivered, expired, deliveryFailed, unknownFutureValue. Read-only. Supports $filter (eq).
status	string	More information about the assignment lifecycle. Possible values include Delivering, Delivered, AutoAssignmentInGracePeriod, NearExpiry1DayNotificationTriggered, or ExpiredNotificationTriggered. Read-only.
target		The subject of the access package assignment. Read-only. Nullable. Supports $expand. Supports $filter (eq) on objectId.

get

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
accessPackage		Read-only. Nullable. Supports $filter (eq) on the id property and $expand query parameters.
assignmentPolicy		Read-only. Supports $filter (eq) on the id property and $expand query parameters.
customExtensionCalloutInstances	array	Information about all the custom extension calls that were made during the access package assignment workflow.
expiredDateTime	string (date-time)	The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)
schedule		When the access assignment is to be in place. Read-only.
state		The state of the access package assignment. The possible values are: delivering, partiallyDelivered, delivered, expired, deliveryFailed, unknownFutureValue. Read-only. Supports $filter (eq).
status	string	More information about the assignment lifecycle. Possible values include Delivering, Delivered, AutoAssignmentInGracePeriod, NearExpiry1DayNotificationTriggered, or ExpiredNotificationTriggered. Read-only.
target		The subject of the access package assignment. Read-only. Nullable. Supports $expand. Supports $filter (eq) on objectId.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_2	select	access_package_id, incompatible_access_package_id
get	select			In Microsoft Entra Entitlement Management, retrieve a collection of accessPackageAssignment objects that indicate a target user has an assignment to a specified access package and also an assignment to another, potentially incompatible, access package. This can be used to prepare to configure the incompatible access packages for a specific access package.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
access_package_id	string	Usage: accessPackageId='{accessPackageId}'
incompatible_access_package_id	string	Usage: incompatibleAccessPackageId='{incompatibleAccessPackageId}'

SELECT examples

get_2

Success

SELECT
id,
accessPackage,
assignmentPolicy,
customExtensionCalloutInstances,
expiredDateTime,
schedule,
state,
status,
target
FROM entra_id.identity_governance.entitlement_management_assignments_additional_access
WHERE access_package_id = '{{ access_package_id }}' -- required
AND incompatible_access_package_id = '{{ incompatible_access_package_id }}' -- required
;

get

In Microsoft Entra Entitlement Management, retrieve a collection of accessPackageAssignment objects that indicate a target user has an assignment to a specified access package and also an assignment to another, potentially incompatible, access package. This can be used to prepare to configure the incompatible access packages for a specific access package.

SELECT
id,
accessPackage,
assignmentPolicy,
customExtensionCalloutInstances,
expiredDateTime,
schedule,
state,
status,
target
FROM entra_id.identity_governance.entitlement_management_assignments_additional_access
;