New command: entra roledefinition set

[MartinM85]

Usage

m365 entra roledefinition set

Description

Updates a custom Microsoft Entra ID role definition

Options

Option	Description
-i, --id [id]	The id of the role definition to be updated. Specify either id or displayName, but not both.
-n, --displayName [displayName]	The display name of the role definition to be updated. Specify either id or displayName, but not both.
--newDisplayName [newDisplayName]	Updated display name for the role definition.
--description [description]	Updated description for the role definition.
-e, --enabled [enabled]	Indicates if the role is enabled for the assignment.
--allowedResourceActions [allowedResourceActions]	Updated comma-separated list of resource actions allowed for the role.
--version [version]	Updated version of the role definition.

Examples

Update a custom Microsoft Entra ID role specified by the id

m365 entra roledefinition add --id fadbc488-151d-4431-9143-6abbffae759f newDisplayName 'Application Remover' --description 'Allows to remove any Entra ID application' --allowedResourceActions 'microsoft.directory/applications/delete'

Update a custom Microsoft Entra ID role specified by the display name

m365 entra roledefinition add --displayName 'Application Remover' --version '1.0' --enabled true --allowedResourceActions 'microsoft.directory/applications/delete,microsoft.directory/applications/owners/update'

Default properties

No response

Additional Info

The command requires the permission RoleManagement.ReadWrite.Directory.

More info: https://learn.microsoft.com/en-us/graph/api/unifiedroledefinition-update?view=graph-rest-1.0&tabs=http

I will work on it