List roleAssignments

Note: Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

List properties and relationships of the roleAssignment objects.


One of the following scopes is required to execute this API:

DeviceManagementRBAC.ReadWrite.All; DeviceManagementRBAC.Read.All

HTTP Request

GET /deviceManagement/roleAssignments/
GET /deviceManagement/roleDefinitions/{roleDefinitionId}/roleAssignments/

Request headers

Header Value
Authorization Bearer <token> Required.
Accept application/json

Request body

Do not supply a request body for this method.


If successful, this method returns a 200 OK response code and a collection of roleAssignment objects in the response body.



Here is an example of the request.



Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 354

  "value": [
      "@odata.type": "#microsoft.graph.roleAssignment",
      "id": "b3234d24-4d24-b323-244d-23b3244d23b3",
      "displayName": "Display Name value",
      "description": "Description value",
      "members": [
        "Members value"
      "scopeMembers": [
        "Scope Members value"