Forum Discussion
Solved
unresolvable roledefinitionId in roleEligibilitySchedules
I query roleManagement/directory/roleEligibilitySchedules to make an inventory of all assigned Entra ID roles through Priviledged Identity Management. Each role assignment has a property RoleDefin...
- roleDefinitionId within the roleEligibilitySchedule object matches the ID value of the role, not its templateId. Do an $expand when fetching the schedules to get the full set of properties:
/roleManagement/directory/roleEligibilitySchedules?$expand=roleDefinition
This will give you both the ID (irrelevant) and the templateId for the role. The latter you can use against the /roleManagement/directory/roleDefinitions/ endpoint to get the custom role name/details.
roleDefinitionId within the roleEligibilitySchedule object matches the ID value of the role, not its templateId. Do an $expand when fetching the schedules to get the full set of properties:
/roleManagement/directory/roleEligibilitySchedules?$expand=roleDefinition
This will give you both the ID (irrelevant) and the templateId for the role. The latter you can use against the /roleManagement/directory/roleDefinitions/ endpoint to get the custom role name/details.
/roleManagement/directory/roleEligibilitySchedules?$expand=roleDefinition
This will give you both the ID (irrelevant) and the templateId for the role. The latter you can use against the /roleManagement/directory/roleDefinitions/ endpoint to get the custom role name/details.
YES! that's it! thank you so much for helping me!
the $expand saves me to look up the name too, brilliant!
the $expand saves me to look up the name too, brilliant!