Skip to content

tenantgovernanceservices-post-governancerequests.md

Latest commit

 

History

History
177 lines (141 loc) · 6.47 KB

tenantgovernanceservices-post-governancerequests.md

File metadata and controls

177 lines (141 loc) · 6.47 KB
title Create governanceRequest
description Create a new governance request to establish a relationship with a governed tenant.
author hafowler
ms.date 03/10/2026
ms.localizationpriority medium
ms.subservice entra-tenant-governance
doc_type apiPageType

Create governanceRequest

Namespace: microsoft.graph.tenantGovernanceServices

[!INCLUDE beta-disclaimer]

Create a new governanceRequest to establish a governance relationship with a governed tenant. The governed tenant can then accept or reject the request.

[!INCLUDE national-cloud-support]

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

[!INCLUDE permissions-table]

[!INCLUDE rbac-tenant-governance-relationship-apis-write]

HTTP request

POST /directory/tenantGovernance/governanceRequests

Request headers

Name Description
Authorization Bearer {token}. Required. Learn more about authentication and authorization.
Content-Type application/json. Required.

Request body

In the request body, supply a JSON representation of the microsoft.graph.tenantGovernanceServices.governanceRequest object.

You can specify the following properties when creating a governanceRequest.

Property Type Description
governedTenantId String The Microsoft Entra tenant ID of the governed tenant. Required.
governancePolicyTemplate@odata.bind microsoft.graph.tenantGovernanceServices.governancePolicyTemplate Provide the governance policy template ID that is used to generate the policySnapshot. Required.

Response

If successful, this method returns a 201 Created response code and a microsoft.graph.tenantGovernanceServices.governanceRequest object in the response body.

Examples

Request

The following example shows a request.

HTTP

POST https://graph.microsoft.com/beta/directory/tenantGovernance/governanceRequests
Content-Type: application/json

{
  "governedTenantId": "bbbbcccc-1111-dddd-2222-eeee3333ffff",
  "governancePolicyTemplate@odata.bind": "https://graph.microsoft.com/beta/directory/tenantGovernance/governancePolicyTemplates/d3d3d3d3-eeee-ffff-aaaa-b4b4b4b4b4b4"
}

C#

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Go

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Java

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

JavaScript

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

PHP

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Python

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Response

The following example shows the response.

Note: The response object shown here might be shortened for readability.

HTTP/1.1 201 Created
Content-Type: application/json

{
  "@odata.type": "#microsoft.graph.tenantGovernanceServices.governanceRequest",
  "id": "aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb",
  "governingTenantId": "aaaabbbb-0000-cccc-1111-dddd2222eeee",
  "governingTenantName": "Contoso, Inc",
  "governedTenantId": "bbbbcccc-1111-dddd-2222-eeee3333ffff",
  "governedTenantName": "Fabrikam",
  "expirationDateTime": "2025-09-17T02:36:22.714163Z",
  "requestDateTime": "2025-09-03T02:36:22.7141627Z",
  "status": "pending",
  "policySnapshot": {
      "policyId": "d3d3d3d3-eeee-ffff-aaaa-b4b4b4b4b4b4",
      "multiTenantApplicationsToProvision": [
      {
          "appId": "66667777-aaaa-8888-bbbb-9999cccc0000",
          "objectId": "cccccccc-2222-3333-4444-dddddddddddd",
          "displayName": "Mega Monitor",
          "requiredResourceAccesses": [
              {
                "resourceAppId": "00000003-0000-0000-c000-000000000000",
                "permissions": [
                {
                  "id": "633e0fce-8c58-4cfb-9495-12bbd5a24f7c",
                  "name": "Policy.Read.ConditionalAccess",
                  "type": "scope"
                },
                {
                  "id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
                  "name": "User.Read",
                  "type": "scope"
                }
                ]
              }
          ]
      }
    ],
    "delegatedAdministrationRoleAssignments": [
      {
          "roleTemplates": [
              {
                  "id": "f2ef992c-3afb-46b9-b7cf-a126ee74c451",
                  "name": "Global Reader"
              }
          ],
          "group": {
              "id": "ffffffff-5555-6666-7777-aaaaaaaaaaaa"
          }
      }
    ]
  }
}