azure-msgraph-service-principal-app-role-assignments
App-role assignments reveal application permission grants and tenant trust relationships.
Where it sits
| location | microsoft.graph.servicePrincipal.appRoleAssignments[] |
| location kind | policy_document |
| data kinds | sensitive_data |
| emits edge | ContainsSecret |
| service | Microsoft Graph (app permissions) (azure:msgraph) |
Collection recipe
| access mode | read_api |
| operation | GET /servicePrincipals/{id}/appRoleAssignments |
| response path | value[] |
| encoding | json |
| params | {"id": "\u003cid\u003e"} |
Required permissions
Application.Read.All
References