swagger: '2.0'
info:
  version: 2020-08-01-preview
  title: Microsoft Azure AccessControlClient AccessConnector ServicePrincipalAppRoleAssignments API
schemes:
- https
tags:
- name: ServicePrincipalAppRoleAssignments
paths:
  /{tenantID}/servicePrincipals/{objectId}/appRoleAssignments:
    get:
      tags:
      - ServicePrincipalAppRoleAssignments
      operationId: microsoftAzureServiceprincipalsListapproleassignments
      summary: Microsoft Azure Applications That The Service Principal Is Assigned To
      parameters:
      - name: objectId
        in: path
        required: true
        type: string
        description: The object ID of the service principal for which to get owners.
      - $ref: '#/parameters/ApiVersionParameter'
      - $ref: '#/parameters/tenantIDInPath'
      responses:
        '200':
          description: OK. The operation was successful.
          schema:
            $ref: '#/definitions/AppRoleAssignmentListResult'
        default:
          description: Error response describing why the operation failed.
          schema:
            $ref: '#/definitions/GraphError'
      x-ms-pageable:
        nextLinkName: odata.nextLink
      description: Needs a more full description created.
definitions:
  ErrorMessage:
    type: object
    properties:
      value:
        type: string
        x-ms-client-name: message
        description: Error message value.
    description: Active Directory error message.
  GraphError:
    type: object
    properties:
      odata.error:
        type: object
        x-ms-client-flatten: true
        $ref: '#/definitions/OdataError'
        description: A Graph API error.
    description: Active Directory error information.
  AppRoleAssignmentListResult:
    type: object
    properties:
      value:
        type: array
        items:
          $ref: '#/definitions/AppRoleAssignment'
        description: A collection of AppRoleAssignment.
      odata.nextLink:
        type: string
        description: The URL to get the next set of results.
    description: AppRoleAssignment list operation result.
  DirectoryObject:
    type: object
    discriminator: objectType
    properties:
      objectId:
        type: string
        description: The object ID.
        readOnly: true
      objectType:
        type: string
        description: The object type.
      deletionTimestamp:
        type: string
        format: date-time
        description: The time at which the directory object was deleted.
        readOnly: true
        x-nullable: true
    required:
    - objectType
    additionalProperties:
      type: object
    description: Represents an Azure Active Directory object.
  OdataError:
    type: object
    properties:
      code:
        type: string
        description: Error code.
      message:
        type: object
        x-ms-client-flatten: true
        $ref: '#/definitions/ErrorMessage'
        description: Error Message.
    description: Active Directory OData error information.
  AppRoleAssignment:
    type: object
    allOf:
    - $ref: '#/definitions/DirectoryObject'
    properties:
      id:
        type: string
        description: The role id that was assigned to the principal. This role must be declared by the target resource application resourceId in its appRoles property.
      principalDisplayName:
        type: string
        description: The display name of the principal that was granted the access.
      principalId:
        type: string
        description: The unique identifier (objectId) for the principal being granted the access.
      principalType:
        type: string
        description: The type of principal. This can either be "User", "Group" or "ServicePrincipal".
      resourceDisplayName:
        type: string
        description: The display name of the resource to which the assignment was made.
      resourceId:
        type: string
        description: The unique identifier (objectId) for the target resource (service principal) for which the assignment was made.
    x-ms-discriminator-value: AppRoleAssignment
    description: AppRoleAssignment information.
parameters:
  ApiVersionParameter:
    name: api-version
    in: query
    required: true
    type: string
    description: Client API version.
  tenantIDInPath:
    name: tenantID
    in: path
    required: true
    type: string
    description: The tenant ID.
    x-ms-parameter-location: client
x-ms-parameterized-host:
  hostTemplate: '{endpoint}'
  useSchemePrefix: false
  parameters:
  - $ref: '#/parameters/Endpoint'