Grant App Role Assignment
A 2-step recipe with Microsoft Entra. We can help you get access.
Recipe · 2 steps
Grant App Role Assignment
with Microsoft Entra · Identity & Access Management
Grant an app role to a service principal, then verify assignments.
- Grant the app role assignment to the service principal, identifying the principal, resource, and role.
- List the app role assignments granted to this service principal to confirm the new assignment is present.
What you'll need to have ready
- accessToken: OAuth 2.0 bearer token with AppRoleAssignment.ReadWrite.All.
- servicePrincipalId: Object id of the service principal receiving the assignment.
- principalId: Object id of the assignee (user, group, or service principal).
- resourceId: Object id of the resource service principal exposing the role.
- appRoleId: Id of the app role to grant (use all-zero GUID for default access).
For your developer
Arazzo workflow microsoft-entra:grant-app-role-assignment, 2 operations: grantServicePrincipalAppRoleAssignment → listServicePrincipalAppRoleAssignments. Specs on APIs.io.