Overview

This node interacts with the TenantGDAP resource to perform the ExecGDAPRemoveGArole operation, which removes a Global Administrator (GA) role from a GDAP (Granular Delegated Admin Privileges) relationship. It is useful in scenarios where you need to revoke GA roles assigned via GDAP in a Microsoft tenant environment, such as managing delegated admin permissions in partner or customer tenants.

Use Case Examples

1. Removing a GA role from a specific GDAP relationship by providing the GDAPId.
2. Automating the cleanup of GA roles in bulk across multiple tenants using batching and custom headers.

Properties

Output

JSON

• json - The JSON response from the API call indicating the result of the GA role removal operation.

Dependencies

• Requires an API key credential for authentication to the CIPP API.

Troubleshooting

• Ensure the GDAPId is correctly specified and exists in the tenant environment.
• Check API credentials and permissions to confirm the node has rights to modify GDAP roles.
• If batching is used, verify batch size and interval to avoid rate limiting.
• Enable debug option to see detailed request and response for troubleshooting.

Links

• Microsoft Partner Center GDAP Documentation - Official Microsoft documentation on Granular Delegated Admin Privileges (GDAP).
• Microsoft Graph GDAP API - API reference for managing GDAP relationships and roles via Microsoft Graph.