Purview Workload Content AdministratorMicrosoft Entra built-in role

1
2
3
4
5
6
7
8
9
10
11
12
13Connect-MgGraph -Scopes "RoleEligibilitySchedule.ReadWrite.Directory"
$user = Get-MgUser -UserId "jane.doe@contoso.com"
New-MgRoleManagementDirectoryRoleEligibilityScheduleRequest -BodyParameter @{
    Action           = "AdminAssign"
    Justification    = "Needs Purview Workload Content Administrator for <reason>"
    RoleDefinitionId = "3f04f91a-4ad7-4bd3-bcfa-49882ea1a88a"
    DirectoryScopeId = "/"
    PrincipalId      = $user.Id
    ScheduleInfo     = @{
        StartDateTime = (Get-Date).ToUniversalTime().ToString("o")
        Expiration    = @{ Type = "afterDuration"; Duration = "P180D" }
    }
}

1
2
3Connect-MgGraph -Scopes "RoleManagement.Read.Directory"
Get-MgRoleManagementDirectoryRoleAssignment -Filter "roleDefinitionId eq '3f04f91a-4ad7-4bd3-bcfa-49882ea1a88a'" -ExpandProperty Principal |
    ForEach-Object { $_.Principal.AdditionalProperties.displayName }