role_management_policy_assignments_policy
Creates, updates, deletes, gets or lists a role_management_policy_assignments_policy resource.
Overview
| Name | role_management_policy_assignments_policy |
| Type | Resource |
| Id | entra_id.policies.role_management_policy_assignments_policy |
Fields
The following fields are returned by SELECT queries:
- get
Retrieved navigation property
| Name | Datatype | Description |
|---|---|---|
id | string | The unique identifier for an entity. Read-only. |
description | string | Description for the policy. |
displayName | string | Display name for the policy. |
effectiveRules | array | The list of effective rules like approval rules and expiration rules evaluated based on inherited referenced rules. For example, if there is a tenant-wide policy to enforce enabling an approval rule, the effective rule will be to enable approval even if the policy has a rule to disable approval. Supports $expand. |
isOrganizationDefault | boolean | This can only be set to true for a single tenant-wide policy which will apply to all scopes and roles. Set the scopeId to / and scopeType to Directory. Supports $filter (eq, ne). |
lastModifiedBy | | The identity who last modified the role setting. |
lastModifiedDateTime | string (date-time) | The time when the role setting was last modified. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$) |
rules | array | The collection of rules like approval rules and expiration rules. Supports $expand. |
scopeId | string | The identifier of the scope where the policy is created. Can be / for the tenant or a group ID. Required. |
scopeType | string | The type of the scope where the policy is created. One of Directory, DirectoryRole, Group. Required. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get | select | unified_role_management_policy_assignment_id | The policy that's associated with a policy assignment. Supports $expand and a nested $expand of the rules and effectiveRules relationships for the policy. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
unified_role_management_policy_assignment_id | string | The unique identifier of unifiedRoleManagementPolicyAssignment |
SELECT examples
- get
The policy that's associated with a policy assignment. Supports $expand and a nested $expand of the rules and effectiveRules relationships for the policy.
SELECT
id,
description,
displayName,
effectiveRules,
isOrganizationDefault,
lastModifiedBy,
lastModifiedDateTime,
rules,
scopeId,
scopeType
FROM entra_id.policies.role_management_policy_assignments_policy
WHERE unified_role_management_policy_assignment_id = '{{ unified_role_management_policy_assignment_id }}' -- required
;