rolesassignedoutsideprivilegedidentitymanagementalertincident.md

title	description	author	ms.localizationpriority	ms.subservice	doc_type
rolesAssignedOutsidePrivilegedIdentityManagementAlertIncident resource type	Represents an alert incident that is triggered if roles have been assigned outside of Privileged Identity Management in the last 30 days.	rkarim-ms	medium	entra-id-governance	resourcePageType

rolesAssignedOutsidePrivilegedIdentityManagementAlertIncident resource type

Namespace: microsoft.graph

[!INCLUDE beta-disclaimer]

Represents an alert incident that is triggered if roles have been assigned outside of Privileged Identity Management in the last 30 days.

Inherits from unifiedRoleManagementAlertIncident.

Properties

Property	Type	Description
assigneeDisplayName	String	Display name of the subject that the incident applies to.
assignmentCreatedDateTime	DateTimeOffset	Date and time of assignment creation.
assigneeId	String	The identifier of the subject that the incident applies to.
assigneeUserPrincipalName	String	User principal name of the subject that the incident applies to. Applies to user principals.
id	String	The identifier for an alert incident. For example, it could be a role assignment id if the incident represents a role assignment Inherited from entity. Supports $filter (eq, ne).
lastActivationDateTime	DateTimeOffset	Date and time of last activation of the eligible assignment.
roleDefinitionId	String	The identifier for the directory role definition that's in scope of this incident.
roleDisplayName	String	The display name for the directory role.
roleTemplateId	String	The globally unique identifier for the directory role.

Relationships

None.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.rolesAssignedOutsidePrivilegedIdentityManagementAlertIncident",
  "id": "String (identifier)",
  "roleTemplateId": "String",
  "roleDefinitionId": "String",
  "roleDisplayName": "String",
  "assigneeId": "String",
  "assigneeDisplayName": "String",
  "assigneeUserPrincipalName": "String",
  "assignmentCreatedDateTime": "String (timestamp)"
}