Create accessPackageAssignmentRequest


APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported.

In Azure AD entitlement management, create a new accessPackageAssignmentRequest object. This operation is used to assign a user to an access package, or to remove an access package assignment.


One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from least to most privileged)
Delegated (work or school account) EntitlementManagement.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application Not supported.

HTTP request

POST /identityGovernance/entitlementManagement/accessPackageAssignmentRequests

Request headers

Name Description
Authorization Bearer {token}. Required.
Content-Type application/json. Required.

Request body

In the request body, supply a JSON representation of accessPackageAssignmentRequest object.

To create an assignment for a user, the value of the requestType property is AdminAdd, and the accessPackageAssignment property contains the targetId of the user being assigned, the assignmentPolicyId property identifying the accessPackageAssignmentPolicy, and the accessPackageId property identifying the accessPackage.

To remove an assignment, the value of the requestType property is AdminRemove, and the accessPackageAssignment property contains the id property identifying the accessPackageAssignment being removed.


If successful, this method returns a 200-series response code and a new accessPackageAssignmentRequest object in the response body.



The following is an example of the request for a direct assignment. The value of the targetID is the object ID of a user being assigned, the value of the accessPackageId is the desired access package, and the value of assignmentPolicyId is a direct assignment policy in that access package.

Content-type: application/json

  "requestType": "AdminAdd",


The following is an example of the response.

Note: The response object shown here might be shortened for readability. All the properties will be returned from an actual call.

HTTP/1.1 201 Created
Content-type: application/json


  "id": "7e382d02-4454-436b-b700-59c7dd77f466",
  "requestType": "AdminAdd",
  "requestState": "Submitted",
  "requestStatus": "Accepted",
  "isValidationOnly": false