| title | roleManagement resource type |
|---|---|
| description | RBAC role management resource |
| ms.localizationpriority | medium |
| author | DougKirschner |
| ms.reviewer | msodsrbac |
| ms.subservice | entra-directory-management |
| doc_type | resourcePageType |
| ms.date | 03/06/2024 |
Namespace: microsoft.graph
[!INCLUDE beta-disclaimer]
Represents a Microsoft 365 RBAC role management entity that provides access to role definitions and role assignments surfaced from various RBAC providers.
The unified role management API currently supports the following RBAC providers in Microsoft 365:
- Cloud PC
- device management (Intune)
- Defender (Microsoft Defender XDR)
- directory (Microsoft Entra directory roles)
- entitlement management (Microsoft Entra entitlement management)
- Exchange Online
For more information, see:
- Roles in Microsoft 365, Microsoft Entra, service-specific and cross-service roles
- Administrator role permissions in Microsoft Entra.
- Delegation and roles in Microsoft Entra entitlement management.
- Role-based access control (RBAC) with Microsoft Intune
- Understanding Role Based Access Control in Exchange Online
None.
None.
| Relationship | Type | Description |
|---|---|---|
| cloudPC | rbacApplicationMultiple | Provides access to role definitions and role assignments of a Cloud PC RBAC provider. Read-only. Nullable. |
| deviceManagement | rbacApplicationMultiple | Provides access to role definitions and role assignments of an Intune RBAC provider. Read-only. Nullable. |
| defender | unifiedRbacApplicationMultiple | Provides access to role definitions and role assignments of the Microsoft Defender Unified RBAC provider. Read-only. Nullable. |
| directory | rbacApplication | Provides access to role definitions and role assignments of a Microsoft Entra RBAC provider. Read-only. Nullable. |
| entitlementManagement | rbacApplication | Provides access to role definitions and role assignments of Microsoft Entra entitlement management. Read-only. Nullable. |
| exchange | unifiedRbacApplication | Provides access to role definitions and role assignments of Exchange providers. Read-only. Nullable. |
None.