Table of Contents

Get-PnPEntraIDServicePrincipalAvailableAppRole

SYNOPSIS

Required Permissions

  • Microsoft Graph API: Any of Application.Read.All, Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All

Gets the available app roles available on a service principal/application registration in Entra ID.

SYNTAX

Get-PnPEntraIDServicePrincipalAvailableAppRole -Principal <ServicePrincipalPipeBind> [-Identity <ServicePrincipalAppRoleBind>] [-Connection <PnPConnection>]

DESCRIPTION

Allows retrieval of all available app roles of a specific service principals/app registration in Entra ID. To retrieve the app roles currently assigned to a specific service principal/application registration, use Get-PnPEntraIDServicePrincipalAssignedAppRole instead.

EXAMPLES

EXAMPLE 1

Get-PnPEntraIDServicePrincipalAvailableAppRole -Principal 797ee8a7-a950-4eb8-945d-7f10cc68a933

Retrieves all app roles of the application registration with the object Id 797ee8a7-a950-4eb8-945d-7f10cc68a933

EXAMPLE 2

Get-PnPEntraIDServicePrincipalAvailableAppRole -Principal "My application"

Retrieves all app roles of the application registration with the name "My application".

EXAMPLE 3

Get-PnPEntraIDServicePrincipal -AppId fd885e69-86dc-4f3b-851e-ad04920031cf | Get-PnPEntraIDServicePrincipalAvailableAppRole

Retrieves all app roles of the application registration with the app Id/Client Id fd885e69-86dc-4f3b-851e-ad04920031cf

EXAMPLE 4

Get-PnPEntraIDServicePrincipal -BuiltInType MicrosoftGraph | Get-PnPEntraIDServicePrincipalAvailableAppRole -Identity "User.ReadWrite.All"

Retrieves the app role details of the role "User.ReadWrite.All" of the built in Microsoft Graph application registration.

PARAMETERS

-Principal

The object id, name or instance of the service principal/application registration to list the app roles for.

Type: ServicePrincipalPipeBind
Parameter Sets: (All)

Required: True
Position: Named
Default value: None
Accept pipeline input: True
Accept wildcard characters: False

-Identity

The object id, name or instance of the application role to retrieve from the service principal/application registration.

Type: ServicePrincipalAppRoleBind
Parameter Sets: (All)

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Connection

Optional connection to be used by the cmdlet. Retrieve the value for this parameter by either specifying -ReturnConnection on Connect-PnPOnline or by executing Get-PnPConnection.

Type: PnPConnection
Parameter Sets: (All)

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Microsoft 365 Patterns and Practices Microsoft Graph documentation

Edit this page