microsoftgraph / microsoftgraph/microsoft-graph-explorer-v4
Unable to read directory role policy rules after assigning activation approvers
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 260
- Forks
- 110
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
Microsoft Graph is returning a 500 error with no code in message when trying to access role policy rules after assigning approvers in Entra Admin Portal.
To Reproduce
This uses the now-defunct "Kaizala Adminstrator" role, for testing (role id 74ef975b-6605-40af-a5d2-b9539d836353)
- Added activation approvers approvers to role via Entra admin portal UI in "role settings"
- GOOD: Can see policy assignment for this role:
- GET https://graph.microsoft.com/v1.0/policies/roleManagementPolicyAssignments?$filter=scopeId+eq+'/'+and+scopeType+eq+'DirectoryRole'+and+roleDefinitionId+eq+'74ef975b-6605-40af-a5d2-b9539d836353'&$expand=policy
- returns expected policy and policy id, has last modifled details
- BAD: Can no longer see policy rules for this role:
- Either of the following now fail with 500 error:
- GET https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/{policy_id}/rules
- GET https://graph.microsoft.com/v1.0/policies/roleManagementPolicyAssignments?$filter=scopeId+eq+'/'+and+scopeType+eq+'DirectoryRole'+and+roleDefinitionId+eq+'74ef975b-6605-40af-a5d2-b9539d836353'&$expand=policy($expand=rules)
- returns a 500 error, no error code, with the description "An error has occurred."
- other roles and policies can still be accessed.
- Entra portal now displays "An error has occurred" when accessing role settings for this role.
- Either of the following now fail with 500 error:
Expected behavior
Expected list of policy rules
Desktop (please complete the following information):
- OS: Windows 11
- Browser: Microsoft Edge
- Version: 149.0.4022.69
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the two Microsoft Graph requests against the role policy assignment and policy rules endpoints using role ID 74ef975b-6605-40af-a5d2-b9539d836353. Compare their responses with other roles and policies, and review the Graph Explorer handling for these requests. Done means the affected policy rules can be retrieved or the service failure is clearly documented with reproducible evidence.
Written by the indexing model from the issue text.
Assessment
- Domain
- api
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100