| author | ms.topic |
|---|---|
psignoret |
include |
For delegated scenarios, the calling user needs at least one of the following Microsoft Entra roles.
- Directory Readers
- Guest Inviter - Read app role assignments for users only
- Directory Synchronization Accounts
- Directory Writer
- Hybrid Identity Administrator
- Identity Governance Administrator
- Privileged Role Administrator
- User Administrator
- Application Administrator
- Cloud Application Administrator