Skip to content

Commit d4d580e

Browse files
LauragraLauragra
authored
Merge pull request #25644 from microsoftgraph/rbac-usage+insights
Entra admin roles - usage and insights
2 parents 5431a82 + 5a87b9c commit d4d580e

10 files changed

+36
-0
lines changed

‎api-reference/beta/api/appcredentialsigninactivity-get.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2424
<!-- { "blockType": "permissions", "name": "appcredentialsigninactivity_get" } -->
2525
[!INCLUDE [permissions-table](../includes/permissions/appcredentialsigninactivity-get-permissions.md)]
2626

27+
[!INCLUDE [rbac-usage-insights-apis](../includes/rbac-for-apis/rbac-usage-insights-apis.md)]
28+
2729
## HTTP request
2830

2931
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/api/applicationsignindetailedsummary-get.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2323
<!-- { "blockType": "permissions", "name": "applicationsignindetailedsummary_get" } -->
2424
[!INCLUDE [permissions-table](../includes/permissions/applicationsignindetailedsummary-get-permissions.md)]
2525

26+
[!INCLUDE [rbac-usage-insights-apis](../includes/rbac-for-apis/rbac-usage-insights-apis.md)]
27+
2628
## HTTP request
2729
<!-- { "blockType": "ignored" } -->
2830
``` http

‎api-reference/beta/api/reportroot-getazureadapplicationsigninsummary.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2323
<!-- { "blockType": "permissions", "name": "reportroot_getazureadapplicationsigninsummary" } -->
2424
[!INCLUDE [permissions-table](../includes/permissions/reportroot-getazureadapplicationsigninsummary-permissions.md)]
2525

26+
[!INCLUDE [rbac-usage-insights-apis](../includes/rbac-for-apis/rbac-usage-insights-apis.md)]
27+
2628
## HTTP request
2729
<!-- { "blockType": "ignored" } -->
2830
``` http

‎api-reference/beta/api/reportroot-getrelyingpartydetailedsummary.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2828
-->
2929
[!INCLUDE [permissions-table](../includes/permissions/reportroot-getrelyingpartydetailedsummary-permissions.md)]
3030

31+
[!INCLUDE [rbac-usage-insights-apis](../includes/rbac-for-apis/rbac-usage-insights-apis.md)]
32+
3133
## HTTP request
3234

3335
<!-- {

‎api-reference/beta/api/reportroot-list-appcredentialsigninactivities.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2424
<!-- { "blockType": "permissions", "name": "reportroot_list_appcredentialsigninactivities" } -->
2525
[!INCLUDE [permissions-table](../includes/permissions/reportroot-list-appcredentialsigninactivities-permissions.md)]
2626

27+
[!INCLUDE [rbac-usage-insights-apis](../includes/rbac-for-apis/rbac-usage-insights-apis.md)]
28+
2729
## HTTP request
2830

2931
<!-- { "blockType": "ignored" } -->

‎api-reference/beta/api/reportroot-list-applicationsignindetailedsummary.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2222
<!-- { "blockType": "permissions", "name": "reportroot_list_applicationsignindetailedsummary" } -->
2323
[!INCLUDE [permissions-table](../includes/permissions/reportroot-list-applicationsignindetailedsummary-permissions.md)]
2424

25+
[!INCLUDE [rbac-usage-insights-apis](../includes/rbac-for-apis/rbac-usage-insights-apis.md)]
26+
2527
## HTTP request
2628

2729
<!-- {

‎api-reference/beta/api/serviceprincipalsigninactivity-get.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2424
<!-- { "blockType": "permissions", "name": "serviceprincipalsigninactivity_get" } -->
2525
[!INCLUDE [permissions-table](../includes/permissions/serviceprincipalsigninactivity-get-permissions.md)]
2626

27+
[!INCLUDE [rbac-usage-insights-apis](../includes/rbac-for-apis/rbac-usage-insights-apis.md)]
28+
2729

2830
## HTTP request
2931

‎api-reference/beta/includes/rbac-for-apis/rbac-usage-insights-apis.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
author: madansr7
3+
ms.topic: include
4+
---
5+
6+
> [!IMPORTANT]
7+
> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation:
8+
> - Reports Reader
9+
> - Security Reader
10+
> - Security Administrator

‎api-reference/v1.0/api/reportroot-getrelyingpartydetailedsummary.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
2727
-->
2828
[!INCLUDE [permissions-table](../includes/permissions/reportroot-getrelyingpartydetailedsummary-permissions.md)]
2929

30+
[!INCLUDE [rbac-usage-insights-apis](../includes/rbac-for-apis/rbac-usage-insights-apis.md)]
31+
3032
## HTTP request
3133

3234
<!-- {

‎api-reference/v1.0/includes/rbac-for-apis/rbac-usage-insights-apis.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
author: madansr7
3+
ms.topic: include
4+
---
5+
6+
> [!IMPORTANT]
7+
> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. The following least privileged roles are supported for this operation:
8+
> - Reports Reader
9+
> - Security Reader
10+
> - Security Administrator

0 commit comments

Comments
 (0)