andrueastman's avatar
andrueastman
Former Employee
Jun 10, 2021
Status:
New

[Application API] Add support for filtering appRoleAssignment by appRoleId

According to this, we can only use filter clauses on Graph for `appRoleAssignment` by resourceId and principalDisplayName.

 

It would be great if we could add support for filtering by appRoleId so as to avoid having to query all the results and filtering them on the client side.

 

This is sourced from List users who have some role from the ServicePrincipal · Issue #990 · microsoftgraph/msgraph-sdk-dotnet (github.com)

9 Comments

  • shamprasad_RH's avatar
    shamprasad_RH
    Copper Contributor

    This will greatly enhance the performance as we are requesting users assigned only to a perticular role.

  • MaxFromC's avatar
    MaxFromC
    Copper Contributor

    we are heavily using the app registrations and manage most of them programmatically. this feature is something that we really need. In fact it's been over two years and we still need it. In some roles we have a few thousand users and it doesn't make any sense for us to fetch everything just in order to get a few users from the other role.

  • vilnuy's avatar
    vilnuy
    Copper Contributor

    If you need to manage user assignments via your application then you need this functionality to filter users by appRoleId. Before that, you'd be forced to perform filtering manually over all the users' assignments which is not great.

  • belaie's avatar
    belaie
    Brass Contributor

    We need this feature to create application permissions reviews for specific api and specific permission

  • coreyperkins's avatar
    coreyperkins
    Copper Contributor

    This filter option should have been available from the beginning, just saying. 🙂

  • josuedallagnese's avatar
    josuedallagnese
    Copper Contributor

    This feature would be great!

    It is not functional query all directory users for this.

     

    It's a good sugestion!