EntitlementManagement.ReadWrite.All
Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated
Read/Write
All Resources
Allows the app to read and write access packages and related entitlement management resources without a signed-in user.
Permission data: May 21, 2026 at 4:34 AM UTC
Delegated Access
App-Only Access
Permission Details
Application Permission
Read and write all entitlement management resources
Allows the app to read and write access packages and related entitlement management resources without a signed-in user.
Permission ID:
9acd699f-1e81-4958-b001-93b1d2506e19
Delegated Permission
Admin consent required
Read and write entitlement management resources
Allows the app to request access to and management of access packages and related entitlement management resources on behalf of the signed-in user.
User sees: Allows the app to request access to and management of access packages and related entitlement management resources that you have access to.
Permission ID:
ae7a573d-81d7-432b-ad44-4ed5c9d89038
Properties
Microsoft Graph v1.0
exact-category-docs
Properties is shown from stable Microsoft Graph v1.0 metadata.
| Property | Type | Description |
|---|---|---|
id |
String |
This value indicates the resource is a singleton. Read-only. Inherited from entity. |
accessPackageAssignmentApprovals |
approval collection |
Approval stages for decisions associated with access package assignment requests. |
accessPackages |
accessPackage collection |
Access packages define the collection of resource roles and the policies for which subjects can request or be assigned access to those resources. |
assignmentPolicies |
accessPackageAssignmentPolicy collection |
Access package assignment policies govern which subjects can request or be assigned an access package via an access package assignment. |
assignmentRequests |
accessPackageAssignmentRequest collection |
Access package assignment requests created by or on behalf of a subject. |
assignments |
accessPackageAssignment collection |
The assignment of an access package to a subject for a period of time. |
catalogs |
accessPackageCatalog collection |
A container for access packages. |
connectedOrganizations |
connectedOrganization collection |
References to a directory or domain of another organization whose users can request access. |
resourceEnvironments |
accessPackageResourceEnvironment collection |
A reference to the geolocation environments in which a resource is located. |
resourceRequests |
accessPackageResourceRequest collection |
Represents a request to add or remove a resource to or from a catalog respectively. |
resourceRoleScopes |
accessPackageResourceRoleScope collection |
|
resources |
accessPackageResource collection |
The resources associated with the catalogs. |
settings |
object |
The settings that control the behavior of Microsoft Entra entitlement management. |
JSON Representation
Microsoft Graph v1.0
exact-category-docs
JSON representation is shown from stable Microsoft Graph v1.0 metadata.
JSON representation
{
"@odata.type": "#microsoft.graph.entitlementManagement",
"id": "String (identifier)"
}Relationships
Microsoft Graph v1.0
exact-category-docs
Relationships is shown from stable Microsoft Graph v1.0 metadata.
| Relationship | Type | Description |
|---|---|---|
accessPackageAssignmentApprovals |
approval collection |
Approval stages for decisions associated with access package assignment requests. |
accessPackages |
accessPackage collection |
Access packages define the collection of resource roles and the policies for which subjects can request or be assigned access to those resources. |
assignmentPolicies |
accessPackageAssignmentPolicy collection |
Access package assignment policies govern which subjects can request or be assigned an access package via an access package assignment. |
assignmentRequests |
accessPackageAssignmentRequest collection |
Access package assignment requests created by or on behalf of a subject. |
assignments |
accessPackageAssignment collection |
The assignment of an access package to a subject for a period of time. |
catalogs |
accessPackageCatalog collection |
A container for access packages. |
connectedOrganizations |
connectedOrganization collection |
References to a directory or domain of another organization whose users can request access. |
resourceEnvironments |
accessPackageResourceEnvironment collection |
A reference to the geolocation environments in which a resource is located. |
resourceRequests |
accessPackageResourceRequest collection |
Represents a request to add or remove a resource to or from a catalog respectively. |
resources |
accessPackageResource collection |
The resources associated with the catalogs. |
settings |
entitlementManagementSettings |
The settings that control the behavior of Microsoft Entra entitlement management. |
resourceRoleScopes |
accessPackageResourceRoleScope collection |
Related resourceRoleScopes data exposed by this resource. |
accessPackageAssignmentPolicies |
accessPackageAssignmentPolicy collection |
Represents the policy that governs which subjects can request or be assigned an access package via an access package assignment. |
accessPackageAssignmentRequests |
accessPackageAssignmentRequest collection |
Represents access package assignment requests created by or on behalf of a user. DO NOT USE. TO BE RETIRED SOON. Use the assignmentRequests relationship instead. |
accessPackageAssignmentResourceRoles |
accessPackageAssignmentResourceRole collection |
Represents the resource-specific role which a subject has been assigned through an access package assignment. |
accessPackageAssignments |
accessPackageAssignment collection |
The assignment of an access package to a subject for a period of time. |
accessPackageCatalogs |
accessPackageCatalog collection |
A container of access packages. |
accessPackageResourceEnvironments |
accessPackageResourceEnvironment collection |
A reference to the geolocation environment in which a resource is located. |
accessPackageResourceRequests |
accessPackageResourceRequest collection |
Represents a request to add or remove a resource to or from a catalog respectively. |
accessPackageResourceRoleScopes |
accessPackageResourceRoleScope collection |
A reference to both a scope within a resource, and a role in that resource for that scope. |
accessPackageResources |
accessPackageResource collection |
A reference to a resource associated with an access package catalog. |
Graph Methods
Delegated access
App-only access
Exact Microsoft Learn match
Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
Exact Microsoft Learn match
Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
Exact Microsoft Learn PowerShell match
Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.
Exact Microsoft Learn PowerShell match
Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.
Code Examples
C# / .NET SDK
accessPackageAssignment: reprocess
// Code snippets are only available for the latest version. Current version is 5.x
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.IdentityGovernance.EntitlementManagement.Assignments["{accessPackageAssignment-id}"].Reprocess.PostAsync();
JavaScript
accessPackageAssignment: reprocess
const options = {
authProvider,
};
const client = Client.init(options);
await client.api('/identityGovernance/entitlementManagement/assignments/d82eb508-acc4-43cc-bcf1-7c1c4a2c073b/reprocess')
.post();
PowerShell
accessPackageAssignment: reprocess
Import-Module Microsoft.Graph.Identity.Governance
Update-MgEntitlementManagementAssignment -AccessPackageAssignmentId $accessPackageAssignmentId
Python
accessPackageAssignment: reprocess
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
await graph_client.identity_governance.entitlement_management.assignments.by_access_package_assignment_id('accessPackageAssignment-id').reprocess.post()App Registration
1
Navigate to Azure Portal
Go to App registrations in Microsoft Entra admin center
2
Add API Permission
Select your app → API permissions → Add a permission → Microsoft Graph
3
Select Permission Type
Choose Application permissions or delegated permissions and search for EntitlementManagement.ReadWrite.All
4
Grant Admin Consent
Application permissions always require admin consent.