ESC
Type to search...

RoleAssignmentSchedule.Read.Directory

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read User Scope

Allows the app to read the active role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read all active role assignments and role schedules for your company's directory

Allows the app to read the active role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.

Delegated Permission Admin consent required

Read all active role assignments for your company's directory

Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
directory object
entitlementManagement object Container for roles and assignments for entitlement management resources.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation
{
  "@odata.type": "#microsoft.graph.roleManagement"
}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
directory rbacApplication Read-only. Nullable.
entitlementManagement rbacApplication Container for roles and assignments for entitlement management resources.
enterpriseApps rbacApplication collection Related enterpriseApps data exposed by this resource.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /roleManagement/directory/roleAssignmentScheduleInstances
GET /roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId}
GET /roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on=parameterValue)
GET /roleManagement/directory/roleAssignmentSchedules
GET /roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId}
GET /roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on='parameterValue')
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identityGovernance/entitlementManagement/accessPackageAssignmentApprovals/{id}
GET /identityGovernance/entitlementManagement/accessPackageAssignmentApprovals/{id}/steps
GET /identityGovernance/entitlementManagement/accessPackageAssignmentApprovals/{id}/steps/{id}
GET /identityGovernance/privilegedAccess/group/assignmentApprovals/{id}
GET /identityGovernance/privilegedAccess/group/assignmentApprovals/{id}/steps
GET /identityGovernance/privilegedAccess/group/assignmentApprovals/{id}/steps/{id}
GET /roleManagement/directory/roleAssignmentApprovals/{id}
GET /roleManagement/directory/roleAssignmentApprovals/{id}/steps
GET /roleManagement/directory/roleAssignmentApprovals/{id}/steps/{id}
GET /roleManagement/directory/roleAssignmentScheduleInstances
GET /roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstancesId}
GET /roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on='principal')
GET /roleManagement/directory/roleAssignmentSchedules
GET /roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedulesId}
GET /roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on='principal')
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgRoleManagementDirectoryRoleAssignmentSchedule /roleManagement/directory/roleAssignmentSchedules
List roleAssignmentSchedules
Get-MgRoleManagementDirectoryRoleAssignmentSchedule /roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId}
Get unifiedRoleAssignmentSchedule
Get-MgRoleManagementDirectoryRoleAssignmentScheduleInstance /roleManagement/directory/roleAssignmentScheduleInstances
List roleAssignmentScheduleInstances
Get-MgRoleManagementDirectoryRoleAssignmentScheduleInstance /roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId}
Get unifiedRoleAssignmentScheduleInstance
Invoke-MgFilterRoleManagementDirectoryRoleAssignmentScheduleByCurrentUser /roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on='parameterValue')
unifiedRoleAssignmentSchedule: filterByCurrentUser
Invoke-MgFilterRoleManagementDirectoryRoleAssignmentScheduleInstanceByCurrentUser /roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on=parameterValue)
unifiedRoleAssignmentScheduleInstance: filterByCurrentUser
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaRoleManagementDirectoryRoleAssignmentSchedule /roleManagement/directory/roleAssignmentSchedules
List roleAssignmentSchedules
Get-MgBetaRoleManagementDirectoryRoleAssignmentSchedule /roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedulesId}
Get unifiedRoleAssignmentSchedule
Get-MgBetaRoleManagementDirectoryRoleAssignmentScheduleInstance /roleManagement/directory/roleAssignmentScheduleInstances
List roleAssignmentScheduleInstances
Get-MgBetaRoleManagementDirectoryRoleAssignmentScheduleInstance /roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstancesId}
Get unifiedRoleAssignmentScheduleInstance
Invoke-MgBetaFilterRoleManagementDirectoryRoleAssignmentScheduleByCurrentUser /roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on='principal')
unifiedRoleAssignmentSchedule: filterByCurrentUser
Invoke-MgBetaFilterRoleManagementDirectoryRoleAssignmentScheduleInstanceByCurrentUser /roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on='principal')
unifiedRoleAssignmentScheduleInstance: filterByCurrentUser

Code Examples

C# / .NET SDK
Get unifiedRoleAssignmentSchedule
// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.RoleManagement.Directory.RoleAssignmentSchedules["{unifiedRoleAssignmentSchedule-id}"].GetAsync();
JavaScript
Get unifiedRoleAssignmentSchedule
const options = {
	authProvider,
};

const client = Client.init(options);

let unifiedRoleAssignmentSchedule = await client.api('/roleManagement/directory/roleAssignmentSchedules/95c690fb-3eb3-4942-a03f-4524aed6f31e')
	.get();
PowerShell
Get unifiedRoleAssignmentSchedule
Import-Module Microsoft.Graph.Identity.Governance

Get-MgRoleManagementDirectoryRoleAssignmentSchedule -UnifiedRoleAssignmentScheduleId $unifiedRoleAssignmentScheduleId
Python
Get unifiedRoleAssignmentSchedule
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.role_management.directory.role_assignment_schedules.by_unified_role_assignment_schedule_id('unifiedRoleAssignmentSchedule-id').get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for RoleAssignmentSchedule.Read.Directory

4

Grant Admin Consent

Application permissions always require admin consent.