New command: entra roledefinition add

[MartinM85]

Usage

m365 entra roledefinition add

Description

Creates a custom Microsoft Entra ID role definition

Options

Option	Description
-n, --displayName <displayName>	The display name for the role definition.
--allowedResourceActions <allowedResourceActions>	Comma-separated list of resource actions allowed for the role.
--description [description]	The description for the role definition.
--enabled [enabled]	Indicates if the role is enabled for the assignment. If not specified, the role is enabled by default.
--version [version]	The version of the role definition.

Examples

Create a custom Microsoft Entra ID role

m365 entra roledefinition add --displayName 'Application Remover' --description 'Allows to remove any Entra ID application' --allowedResourceActions 'microsoft.directory/applications/delete'

Create a custom Microsoft Entra ID role, but disable it for the assignment

m365 entra roledefinition add --displayName 'Application Remover' --version '1.0' --enabled false --allowedResourceActions 'microsoft.directory/applications/delete,microsoft.directory/applications/owners/update'

Default properties

No response

Additional Info

The command requires the permission RoleManagement.ReadWrite.Directory.

More info: https://learn.microsoft.com/en-us/graph/api/unifiedroledefinition-get?view=graph-rest-1.0&tabs=http#for-the-directory-microsoft-entra-id-provider

I will work on it