Skip to main content

entra rolepermission list

Lists all Microsoft Entra ID role permissions

Usage​

m365 entra rolepermission list [options]

Options​

-n, --resourceNamespace [resourceNamespace]

The namespace of the resource for which to retrieve role permissions.

-p, --privileged

Retrieve only sensitive role permissions.

-h, --help [help]

Output usage information. Optionally, specify which section of command's help you want to see. Allowed values are options, examples, remarks, response, full. Default is options.

--query [query]

JMESPath query string. See http://jmespath.org/ for more information and examples.

-o, --output [output]

Output type. json, text, csv, md, none. Default json.

--verbose

Runs command with verbose logging.

--debug

Runs command with debug logging.

Remarks​

warning

The command is based on an API that is currently in preview and is subject to change once the API reached general availability.

Examples​

Get a list of role permissions

m365 entra rolepermission list --resourceNamespace 'microsoft.directory'

Get a list of sensitive role permissions

m365 entra rolepermission list --resourceNamespace 'microsoft.directory' --privileged

Response​

[
  {
    "actionVerb": null,
    "description": "Create and delete access reviews, and read and update all properties of access reviews in Microsoft Entra ID",
    "id": "microsoft.directory-accessReviews-allProperties-allTasks",
    "isPrivileged": false,
    "name": "microsoft.directory/accessReviews/allProperties/allTasks",
    "resourceScopeId": null
  },
  {
    "actionVerb": "GET",
    "description": "Read all properties of access reviews",
    "id": "microsoft.directory-accessReviews-allProperties-read-get",
    "isPrivileged": false,
    "name": "microsoft.directory/accessReviews/allProperties/read",
    "resourceScopeId": null
  },
  {
    "actionVerb": null,
    "description": "Manage access reviews of application role assignments in Microsoft Entra ID",
    "id": "microsoft.directory-accessReviews-definitions.applications-allProperties-allTasks",
    "isPrivileged": false,
    "name": "microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks",
    "resourceScopeId": null
  },
  {
    "actionVerb": "GET",
    "description": "Read all properties of access reviews of application role assignments in Microsoft Entra ID",
    "id": "microsoft.directory-accessReviews-definitions.applications-allProperties-read-get",
    "isPrivileged": false,
    "name": "microsoft.directory/accessReviews/definitions.applications/allProperties/read",
    "resourceScopeId": null
  }
]
CTRL + M