Merge pull request #25501 from microsoftgraph/rbac-contracts

Entra admin roles - contracts

Author: Lauragra

api-reference/beta/api/contract-get.md

@@ -25,6 +25,10 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "contract_get" } -->
 [!INCLUDE [permissions-table](../includes/permissions/contract-get-permissions.md)]
 
+> [!IMPORTANT]
+> 
+> In delegated scenarios with work or school accounts, the signed-in user be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Directory Readers* is the only least privileged role supported for this operation.
+
 ## HTTP request
 <!-- { "blockType": "ignored" } -->
 ```http

api-reference/beta/api/contract-list.md

@@ -25,6 +25,10 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "contract_list" } -->
 [!INCLUDE [permissions-table](../includes/permissions/contract-list-permissions.md)]
 
+> [!IMPORTANT]
+> 
+> In delegated scenarios with work or school accounts, the signed-in user be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Directory Readers* is the only least privileged role supported for this operation.
+
 ## HTTP request
 <!-- { "blockType": "ignored" } -->
 

api-reference/v1.0/api/contract-get.md

@@ -23,6 +23,10 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "contract_get" } -->
 [!INCLUDE [permissions-table](../includes/permissions/contract-get-permissions.md)]
 
+> [!IMPORTANT]
+> 
+> In delegated scenarios with work or school accounts, the signed-in user be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Directory Readers* is the only least privileged role supported for this operation.
+
 ## HTTP request
 <!-- { "blockType": "ignored" } -->
 ```http

api-reference/v1.0/api/contract-list.md

@@ -23,6 +23,10 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "contract_list" } -->
 [!INCLUDE [permissions-table](../includes/permissions/contract-list-permissions.md)]
 
+> [!IMPORTANT]
+> 
+> In delegated scenarios with work or school accounts, the signed-in user be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Directory Readers* is the only least privileged role supported for this operation.
+
 ## HTTP request
 <!-- { "blockType": "ignored" } -->