aad approleassignment list

Lists app role assignments for the specified application registration

Usage

m365 aad approleassignment list [options]

Options

-i, --appId [appId]

Application (client) Id of the App Registration for which the configured app roles should be retrieved

-n, --appDisplayName [appDisplayName]

Display name of the application for which the configured app roles should be retrieved

--appObjectId [appObjectId]

ObjectId of the application for which the configured app roles should be retrieved

-h, --help [help]

Output usage information. Optionally, specify which section of command's help you want to see. Allowed values are options, examples, remarks, response, full. Default is full.

--query [query]

JMESPath query string. See http://jmespath.org/ for more information and examples.

-o, --output [output]

Output type. json, text, csv, md. Default json.

--verbose

Runs command with verbose logging.

--debug

Runs command with debug logging.

Remarks

Specify either the appId, appObjectId or appDisplayName. If you specify more than one option value, the command will fail with an error.

Examples

List app roles assigned to service principal with Application (client) ID b2307a39-e878-458b-bc90-03bc578531d6.

m365 aad approleassignment list --appId b2307a39-e878-458b-bc90-03bc578531d6

List app roles assigned to service principal with Application display name MyAppName.

m365 aad approleassignment list --appDisplayName 'MyAppName'

List app roles assigned to service principal with ObjectId b2307a39-e878-458b-bc90-03bc578531dd.

m365 aad approleassignment list --appObjectId b2307a39-e878-458b-bc90-03bc578531dd

More information

• Application and service principal objects in Azure Active Directory (Azure AD): https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects