Update-MgBetaRoleManagementDeviceManagementRoleDefinition

PATCH /roleManagement/deviceManagement/roleDefinitions/{unifiedRoleDefinition-id} (beta)

Module: Microsoft.Graph.Beta.DeviceManagement.Enrollment

Permissions

Delegated (work or school)

• DeviceManagementRBAC.ReadWrite.All (least privilege)
• RoleManagement.ReadWrite.Directory
• RoleManagement.ReadWrite.CloudPC
• Directory.ReadWrite.All
• CloudPC.ReadWrite.All

Delegated (personal)

No permission metadata available for this account type.

Application

• DeviceManagementRBAC.ReadWrite.All (least privilege)
• RoleManagement.ReadWrite.Directory
• RoleManagement.ReadWrite.CloudPC
• Directory.ReadWrite.All
• CloudPC.ReadWrite.All

Source: Microsoft Graph PowerShell SDK metadata

Confirm property-specific permissions, Entra roles, licensing and ownership requirements in the official documentation. SDK metadata outside the verified sample is not independently certified.

Explore Update-MgBetaRoleManagementDeviceManagementRoleDefinition