microsoftgraph / microsoftgraph/msgraph-metadata

Operations related to /roleManagement/directory/roleAssignmentApprovals marked for deprecation in beta with no replacement

Open
#832 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

ToTriage
Dominant language
XSLT
Stars
166
Forks
55
Avg merge
16h 12m
Merged PRs (30d)
14

Description

Hi,

We found that many of the operations that relates to roleManagement/directory/roleAssignmentApprovals/ are marked for deprecation, but we can't find any suitable replacement for approving or denying role assignments in Entra ID Privileged Identity Management.

More to that, we also can't find any related announcement in Microsoft Graph changelog.

The Entra ID documentation also doesn't state anything about the deprecation of those paths and still indicates to use them for our use case.

Am I reading the deprecation notice wrong in the SDK and in the OpenAPI.yaml for the beta API. Is there any planned replacement for the same operation?

Here is an exemple of operation that is marked for deprecation with a removal date of 2025-12-01'

Thank you or your input on this :)

/roleManagement/directory/roleAssignmentApprovals/{approval-id}/steps/{approvalStep-id}':
    description: Provides operations to manage the steps property of the microsoft.graph.approval entity.
    get:
      tags:
        - roleManagement.rbacApplication
      summary: Get steps from roleManagement
      description: Used to represent the decision associated with a single step in the approval process configured in approvalStage.
      operationId: roleManagement.directory.roleAssignmentApprovals.GetSteps
      parameters:
        - name: $select
          in: query
          description: Select properties to be returned
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
        - name: $expand
          in: query
          description: Expand related entities
          style: form
          explode: false
          schema:
            uniqueItems: true
            type: array
            items:
              type: string
      responses:
        2XX:
          description: Retrieved navigation property
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.approvalStep'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      deprecated: true
      x-ms-deprecation:
        removalDate: '2025-12-01'
        date: '2025-01-01'
        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
      x-ms-docs-operation-type: operation
    patch:
      tags:
        - roleManagement.rbacApplication
      summary: Update the navigation property steps in roleManagement
      operationId: roleManagement.directory.roleAssignmentApprovals.UpdateSteps
      requestBody:
        description: New navigation property values
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/microsoft.graph.approvalStep'
        required: true
      responses:
        2XX:
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/microsoft.graph.approvalStep'
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      deprecated: true
      x-ms-deprecation:
        removalDate: '2025-12-01'
        date: '2025-01-01'
        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
      x-ms-docs-operation-type: operation
    delete:
      tags:
        - roleManagement.rbacApplication
      summary: Delete navigation property steps for roleManagement
      operationId: roleManagement.directory.roleAssignmentApprovals.DeleteSteps
      parameters:
        - name: If-Match
          in: header
          description: ETag
          schema:
            type: string
      responses:
        '204':
          description: Success
        4XX:
          $ref: '#/components/responses/error'
        5XX:
          $ref: '#/components/responses/error'
      deprecated: true
      x-ms-deprecation:
        removalDate: '2025-12-01'
        date: '2025-01-01'
        version: 2025-01/PrivatePreview:microsoft.applicationAuthorization
        description: This version is being deprecated and is scheduled for removal on 2025-12-01.Please migrate to the latest version before the removal date.
      x-ms-docs-operation-type: operation
    parameters:
      - name: approval-id
        in: path
        description: The unique identifier of approval
        required: true
        schema:
          type: string
        x-ms-docs-key-type: approval
      - name: approvalStep-id
        in: path
        description: The unique identifier of approvalStep
        required: true
        schema:
          type: string
        x-ms-docs-key-type: approvalStep
    x-ms-docs-grouped-path:
      - '/roleManagement/enterpriseApps/{rbacApplication-id}/roleAssignmentApprovals/{approval-id}/steps/{approvalStep-id}'
      - '/roleManagement/entitlementManagement/roleAssignmentApprovals/{approval-id}/steps/{approvalStep-id}'

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the beta OpenAPI.yaml definitions under /roleManagement/directory/roleAssignmentApprovals and compare their deprecation metadata with the Microsoft Graph changelog and Entra ID approval-workflow documentation. Establish whether the deprecation is intentional, identify any replacement for approving or denying assignments, and document the confirmed guidance or required metadata correction.

Written by the indexing model from the issue text.

Assessment

Tech stack
openapi
Domain
api, authorization, documentation
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.