RoleManagement.Read.Directory | Graph Permissions

Permission Details

Application Permission

Read all directory RBAC settings

Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes reading directory role templates, directory roles and memberships.

Permission ID: 483bed4a-2ad3-4361-a73b-c83ccdbdc53c

Delegated Permission

Read directory RBAC settings

Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, directory roles and memberships.

Permission ID: 741c54c3-0c1e-44a1-818b-3f97ab4e8c83

Properties

Microsoft Graph v1.0 exact-category-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property	Type	Description
`directory`	`object`
`entitlementManagement`	`object`	Container for roles and assignments for entitlement management resources.

JSON Representation

Microsoft Graph v1.0 exact-category-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation

{
  "@odata.type": "#microsoft.graph.roleManagement"
}

Relationships

Microsoft Graph v1.0 exact-category-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship	Type	Description
`directory`	`rbacApplication`	Read-only. Nullable.
`entitlementManagement`	`rbacApplication`	Container for roles and assignments for entitlement management resources.
`enterpriseApps`	`rbacApplication collection`	Related enterpriseApps data exposed by this resource.

Graph Methods

Delegated access App-only access

Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/directory/administrativeUnits/{id}/scopedRoleMembers`
GET `/directory/administrativeUnits/{id}/scopedRoleMembers/{id}`
GET `/directoryRoles`
GET `/directoryRoles(roleTemplateId='{roleTemplateId}')`
GET `/directoryRoles(roleTemplateId='{roleTemplateId}')/members`
GET `/directoryRoles(roleTemplateId='{roleTemplateId}')/scopedMembers`
GET `/directoryRoles/{role-id}`
GET `/directoryRoles/{role-id}/members`
GET `/directoryroles/{role-id}/scopedMembers`
GET `/directoryRoles/delta`
GET `/directoryRoleTemplates`
GET `/directoryRoleTemplates/{id}`
GET `/policies/roleManagementPolicies?$filter=scopeId eq '{groupId}' and scopeType eq 'Group'`
GET `/policies/roleManagementPolicies?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole'`
GET `/policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}`
GET `/policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/rules`
GET `/policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/rules/{unifiedRoleManagementPolicyRuleId}`
GET `/policies/roleManagementPolicyAssignments?$filter=scopeId eq '{groupId}' and scopeType eq 'Group'`
GET `/policies/roleManagementPolicyAssignments?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole'`
GET `/policies/roleManagementPolicyAssignments/{unifiedRoleManagementPolicyAssignmentId}`
GET `/roleManagement/directory/roleAssignments`
GET `/roleManagement/directory/roleAssignments/{id}`
GET `/roleManagement/directory/roleAssignmentScheduleInstances`
GET `/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId}`
GET `/roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on=parameterValue)`
GET `/roleManagement/directory/roleAssignmentSchedules`
GET `/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId}`
GET `/roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on='parameterValue')`
GET `/roleManagement/directory/roleDefinitions`
GET `/roleManagement/directory/roleDefinitions/{id}`
GET `/roleManagement/directory/roleEligibilityScheduleInstances`
GET `/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstanceId}`
GET `/roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on='parameterValue')`
GET `/roleManagement/directory/roleEligibilitySchedules`
GET `/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilityScheduleId}`
GET `/roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on='parameterValue')`
GET `/roleManagement/entitlementManagement/roleAssignments`
GET `/roleManagement/entitlementManagement/roleAssignments/{id}`
GET `/roleManagement/entitlementManagement/roleDefinitions`
GET `/roleManagement/entitlementManagement/roleDefinitions/{id}`

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/administrativeUnits/{id}/scopedRoleMembers`
GET `/administrativeUnits/{id}/scopedRoleMembers/{id}`
GET `/directoryRoles`
GET `/directoryRoles(roleTemplateId='{roleTemplateId}')`
GET `/directoryRoles(roleTemplateId='{roleTemplateId}')/members`
GET `/directoryRoles(roleTemplateId='{roleTemplateId}')/scopedMembers`
GET `/directoryRoles/{role-id}`
GET `/directoryRoles/{role-id}/members`
GET `/directoryroles/{role-id}/scopedMembers`
GET `/directoryRoles/delta`
GET `/directoryRoleTemplates`
GET `/directoryRoleTemplates/{id}`
GET `/policies/roleManagementPolicies?$filter=scopeId eq '{groupId}' and scopeType eq 'Group'`
GET `/policies/roleManagementPolicies?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole'`
GET `/policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}`
GET `/policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/effectiveRules`
GET `/policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/rules`
GET `/policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/rules/{unifiedRoleManagementPolicyRuleId}`
GET `/policies/roleManagementPolicyAssignments?$filter=scopeId eq '{groupId}' and scopeType eq 'Group'`
GET `/policies/roleManagementPolicyAssignments?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole'`
GET `/policies/roleManagementPolicyAssignments/{unifiedRoleManagementPolicyAssignmentId}`
GET `/roleManagement/cloudPC/roleDefinitions`
GET `/roleManagement/cloudPC/roleDefinitions/{id}`
GET `/roleManagement/defender/roleDefinitions`
GET `/roleManagement/defender/roleDefinitions/{id}`
GET `/roleManagement/deviceManagement/roleDefinitions`
GET `/roleManagement/deviceManagement/roleDefinitions/{id}`
GET `/roleManagement/directory/resourceNamespaces`
GET `/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespaceId}`
GET `/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespaceId}/resourceActions`
GET `/roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespaceId}/resourceActions/{unifiedRbacResourceActionId}`
GET `/roleManagement/directory/roleAssignments`
GET `/roleManagement/directory/roleAssignments/{id}`
GET `/roleManagement/directory/roleAssignmentScheduleInstances`
GET `/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstancesId}`
GET `/roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on='principal')`
GET `/roleManagement/directory/roleAssignmentSchedules`
GET `/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedulesId}`
GET `/roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on='principal')`
GET `/roleManagement/directory/roleDefinitions`
GET `/roleManagement/directory/roleDefinitions/{id}`
GET `/roleManagement/directory/roleDefinitions/{unifiedRoleDefinitionId}/assignedPrincipals(transitive=@transitive,directoryScopeType='@directoryScopeType',directoryScopeId='@directoryScopeId')`
GET `/roleManagement/directory/roleEligibilityScheduleInstances`
GET `/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstancesId}`
GET `/roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on='principal')`
GET `/roleManagement/directory/roleEligibilitySchedules`
GET `/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedulesId}`
GET `/roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on='principal')`
GET `/roleManagement/directory/transitiveRoleAssignments?$filter=principalId eq '{principalId}'`
GET `/roleManagement/entitlementManagement/roleAssignments?`
GET `/roleManagement/entitlementManagement/roleAssignments/{id}`
GET `/roleManagement/entitlementManagement/roleDefinitions`
GET `/roleManagement/entitlementManagement/roleDefinitions/{id}`
GET `/roleManagement/exchange/roleAssignments`
GET `/roleManagement/exchange/roleAssignments/{id}`
GET `/roleManagement/exchange/roleDefinitions`
GET `/roleManagement/exchange/roleDefinitions/{id}`

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgDirectoryAdministrativeUnitScopedRoleMember` /directory/administrativeUnits/{id}/scopedRoleMembers List scopedRoleMembers
`Get-MgDirectoryAdministrativeUnitScopedRoleMember` /directory/administrativeUnits/{id}/scopedRoleMembers/{id} Get a scopedRoleMember
`Get-MgDirectoryRole` /directoryRoles List directoryRoles
`Get-MgDirectoryRole` /directoryRoles/{role-id} Get directoryRole
`Get-MgDirectoryRoleDelta` /directoryRoles/delta directoryRole: delta
`Get-MgDirectoryRoleMember` /directoryRoles/{role-id}/members List members of a directory role
`Get-MgDirectoryRoleScopedMember` /directoryroles/{role-id}/scopedMembers List scopedMembers for a directory role
`Get-MgDirectoryRoleTemplate` /directoryRoleTemplates List directoryRoleTemplates
`Get-MgDirectoryRoleTemplate` /directoryRoleTemplates/{id} Get directoryRoleTemplate
`Get-MgPolicyRoleManagementPolicy` /policies/roleManagementPolicies?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole' List roleManagementPolicies
`Get-MgPolicyRoleManagementPolicy` /policies/roleManagementPolicies/{unifiedRoleManagementPolicyId} Get unifiedRoleManagementPolicy
`Get-MgPolicyRoleManagementPolicyAssignment` /policies/roleManagementPolicyAssignments?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole' List roleManagementPolicyAssignments
`Get-MgPolicyRoleManagementPolicyAssignment` /policies/roleManagementPolicyAssignments/{unifiedRoleManagementPolicyAssignmentId} Get unifiedRoleManagementPolicyAssignment
`Get-MgPolicyRoleManagementPolicyRule` /policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/rules List rules (for a role management policy)
`Get-MgPolicyRoleManagementPolicyRule` /policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/rules/{unifiedRoleManagementPolicyRuleId} Get unifiedRoleManagementPolicyRule
`Get-MgRoleManagementDirectoryRoleAssignment` /roleManagement/directory/roleAssignments List unifiedRoleAssignments
`Get-MgRoleManagementDirectoryRoleAssignment` /roleManagement/directory/roleAssignments/{id} Get unifiedRoleAssignment
`Get-MgRoleManagementDirectoryRoleAssignmentSchedule` /roleManagement/directory/roleAssignmentSchedules List roleAssignmentSchedules
`Get-MgRoleManagementDirectoryRoleAssignmentSchedule` /roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId} Get unifiedRoleAssignmentSchedule
`Get-MgRoleManagementDirectoryRoleAssignmentScheduleInstance` /roleManagement/directory/roleAssignmentScheduleInstances List roleAssignmentScheduleInstances
`Get-MgRoleManagementDirectoryRoleAssignmentScheduleInstance` /roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId} Get unifiedRoleAssignmentScheduleInstance
`Get-MgRoleManagementDirectoryRoleDefinition` /roleManagement/directory/roleDefinitions List roleDefinitions
`Get-MgRoleManagementDirectoryRoleDefinition` /roleManagement/directory/roleDefinitions/{id} Get unifiedRoleDefinition
`Get-MgRoleManagementDirectoryRoleEligibilitySchedule` /roleManagement/directory/roleEligibilitySchedules List roleEligibilitySchedules
`Get-MgRoleManagementDirectoryRoleEligibilitySchedule` /roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilityScheduleId} Get unifiedRoleEligibilitySchedule
`Get-MgRoleManagementDirectoryRoleEligibilityScheduleInstance` /roleManagement/directory/roleEligibilityScheduleInstances List roleEligibilityScheduleInstances
`Get-MgRoleManagementDirectoryRoleEligibilityScheduleInstance` /roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstanceId} Get unifiedRoleEligibilityScheduleInstance
`Get-MgRoleManagementEntitlementManagementRoleAssignment` /roleManagement/directory/roleAssignments List unifiedRoleAssignments
`Get-MgRoleManagementEntitlementManagementRoleDefinition` /roleManagement/directory/roleDefinitions List roleDefinitions
`Invoke-MgFilterRoleManagementDirectoryRoleAssignmentScheduleByCurrentUser` /roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on='parameterValue') unifiedRoleAssignmentSchedule: filterByCurrentUser
`Invoke-MgFilterRoleManagementDirectoryRoleAssignmentScheduleInstanceByCurrentUser` /roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on=parameterValue) unifiedRoleAssignmentScheduleInstance: filterByCurrentUser
`Invoke-MgFilterRoleManagementDirectoryRoleEligibilityScheduleByCurrentUser` /roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on='parameterValue') unifiedRoleEligibilitySchedule: filterByCurrentUser
`Invoke-MgFilterRoleManagementDirectoryRoleEligibilityScheduleInstanceByCurrentUser` /roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on='parameterValue') unifiedRoleEligibilityScheduleInstance: filterByCurrentUser

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgBetaAdministrativeUnitScopedRoleMember` /administrativeUnits/{id}/scopedRoleMembers List scopedRoleMembers
`Get-MgBetaAdministrativeUnitScopedRoleMember` /administrativeUnits/{id}/scopedRoleMembers/{id} Get a scopedRoleMember
`Get-MgBetaDirectoryRole` /directoryRoles List directoryRoles
`Get-MgBetaDirectoryRole` /directoryRoles/{role-id} Get directoryRole
`Get-MgBetaDirectoryRoleByRoleTemplateId` /directoryRoles/{role-id} Get directoryRole
`Get-MgBetaDirectoryRoleDelta` /directoryRoles/delta directoryRole: delta
`Get-MgBetaDirectoryRoleMember` /directoryRoles/{role-id}/members List members
`Get-MgBetaDirectoryRoleScopedMember` /directoryroles/{role-id}/scopedMembers List scopedMembers for a directory role
`Get-MgBetaDirectoryRoleTemplate` /directoryRoleTemplates List directoryRoleTemplates
`Get-MgBetaDirectoryRoleTemplate` /directoryRoleTemplates/{id} Get directoryRoleTemplate
`Get-MgBetaPolicyRoleManagementPolicy` /policies/roleManagementPolicies?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole' List roleManagementPolicies
`Get-MgBetaPolicyRoleManagementPolicy` /policies/roleManagementPolicies/{unifiedRoleManagementPolicyId} Get unifiedRoleManagementPolicy
`Get-MgBetaPolicyRoleManagementPolicyAssignment` /policies/roleManagementPolicyAssignments?$filter=scopeId eq '/' and scopeType eq 'DirectoryRole' List roleManagementPolicyAssignments
`Get-MgBetaPolicyRoleManagementPolicyAssignment` /policies/roleManagementPolicyAssignments/{unifiedRoleManagementPolicyAssignmentId} Get unifiedRoleManagementPolicyAssignment
`Get-MgBetaPolicyRoleManagementPolicyEffectiveRule` /policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/effectiveRules List effectiveRules
`Get-MgBetaPolicyRoleManagementPolicyRule` /policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/rules List rules (for a role management policy)
`Get-MgBetaPolicyRoleManagementPolicyRule` /policies/roleManagementPolicies/{unifiedRoleManagementPolicyId}/rules/{unifiedRoleManagementPolicyRuleId} Get unifiedRoleManagementPolicyRule
`Get-MgBetaRoleManagementCloudPcRoleDefinition` /roleManagement/cloudPC/roleDefinitions List roleDefinitions
`Get-MgBetaRoleManagementCloudPcRoleDefinition` /roleManagement/cloudPC/roleDefinitions/{id} Get unifiedRoleDefinition
`Get-MgBetaRoleManagementDirectoryResourceNamespace` /roleManagement/directory/resourceNamespaces List resourceNamespaces
`Get-MgBetaRoleManagementDirectoryResourceNamespace` /roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespaceId} Get unifiedRbacResourceNamespace
`Get-MgBetaRoleManagementDirectoryResourceNamespaceResourceAction` /roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespaceId}/resourceActions List resourceActions
`Get-MgBetaRoleManagementDirectoryResourceNamespaceResourceAction` /roleManagement/directory/resourceNamespaces/{unifiedRbacResourceNamespaceId}/resourceActions/{unifiedRbacResourceActionId} Get unifiedRbacResourceAction
`Get-MgBetaRoleManagementDirectoryRoleAssignment` /roleManagement/directory/roleAssignments List unifiedRoleAssignments
`Get-MgBetaRoleManagementDirectoryRoleAssignment` /roleManagement/directory/roleAssignments/{id} Get unifiedRoleAssignment
`Get-MgBetaRoleManagementDirectoryRoleAssignmentSchedule` /roleManagement/directory/roleAssignmentSchedules List roleAssignmentSchedules
`Get-MgBetaRoleManagementDirectoryRoleAssignmentSchedule` /roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentSchedulesId} Get unifiedRoleAssignmentSchedule
`Get-MgBetaRoleManagementDirectoryRoleAssignmentScheduleInstance` /roleManagement/directory/roleAssignmentScheduleInstances List roleAssignmentScheduleInstances
`Get-MgBetaRoleManagementDirectoryRoleAssignmentScheduleInstance` /roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstancesId} Get unifiedRoleAssignmentScheduleInstance
`Get-MgBetaRoleManagementDirectoryRoleDefinition` /roleManagement/cloudPC/roleDefinitions List roleDefinitions
`Get-MgBetaRoleManagementDirectoryRoleDefinition` /roleManagement/cloudPC/roleDefinitions/{id} Get unifiedRoleDefinition
`Get-MgBetaRoleManagementDirectoryRoleEligibilitySchedule` /roleManagement/directory/roleEligibilitySchedules List roleEligibilitySchedules
`Get-MgBetaRoleManagementDirectoryRoleEligibilitySchedule` /roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilitySchedulesId} Get unifiedRoleEligibilitySchedule
`Get-MgBetaRoleManagementDirectoryRoleEligibilityScheduleInstance` /roleManagement/directory/roleEligibilityScheduleInstances List roleEligibilityScheduleInstances
`Get-MgBetaRoleManagementDirectoryRoleEligibilityScheduleInstance` /roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstancesId} Get unifiedRoleEligibilityScheduleInstance
`Get-MgBetaRoleManagementDirectoryTransitiveRoleAssignment` /roleManagement/directory/transitiveRoleAssignments?$filter=principalId eq '{principalId}' List transitiveRoleAssignment
`Get-MgBetaRoleManagementEntitlementManagementRoleAssignment` /roleManagement/directory/roleAssignments List unifiedRoleAssignments
`Get-MgBetaRoleManagementEntitlementManagementRoleDefinition` /roleManagement/cloudPC/roleDefinitions List roleDefinitions
`Get-MgBetaRoleManagementEntitlementManagementRoleDefinition` /roleManagement/cloudPC/roleDefinitions/{id} Get unifiedRoleDefinition
`Get-MgBetaRoleManagementExchangeRoleAssignment` /roleManagement/directory/roleAssignments List unifiedRoleAssignments
`Get-MgBetaRoleManagementExchangeRoleAssignment` /roleManagement/directory/roleAssignments/{id} Get unifiedRoleAssignment
`Get-MgBetaRoleManagementExchangeRoleDefinition` /roleManagement/cloudPC/roleDefinitions List roleDefinitions
`Get-MgBetaRoleManagementExchangeRoleDefinition` /roleManagement/cloudPC/roleDefinitions/{id} Get unifiedRoleDefinition
`Invoke-MgBetaFilterRoleManagementDirectoryRoleAssignmentScheduleByCurrentUser` /roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on='principal') unifiedRoleAssignmentSchedule: filterByCurrentUser
`Invoke-MgBetaFilterRoleManagementDirectoryRoleAssignmentScheduleInstanceByCurrentUser` /roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on='principal') unifiedRoleAssignmentScheduleInstance: filterByCurrentUser
`Invoke-MgBetaFilterRoleManagementDirectoryRoleEligibilityScheduleByCurrentUser` /roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on='principal') unifiedRoleEligibilitySchedule: filterByCurrentUser
`Invoke-MgBetaFilterRoleManagementDirectoryRoleEligibilityScheduleInstanceByCurrentUser` /roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on='principal') unifiedRoleEligibilityScheduleInstance: filterByCurrentUser

Code Examples

C# / .NET SDK

directoryRole: delta

View official example on Microsoft Learn

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.DirectoryRoles.Delta.GetAsDeltaGetResponseAsync();

JavaScript

directoryRole: delta

View official example on Microsoft Learn

const options = {
	authProvider,
};

const client = Client.init(options);

let delta = await client.api('/directoryRoles/delta')
	.get();

PowerShell

directoryRole: delta

View official example on Microsoft Learn

Import-Module Microsoft.Graph.Identity.DirectoryManagement

Get-MgDirectoryRoleDelta

Python

directoryRole: delta

View official example on Microsoft Learn

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.directory_roles.delta.get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for RoleManagement.Read.Directory

4

Grant Admin Consent

Application permissions always require admin consent.