Kaffeeundcode
Script Library
PowerShell 01.06.2026

Script Workspace

Get EntraIDDirectoryRoleTemplates

Review the purpose, inspect the code, then test it safely in your own tenant.

119_Get-EntraIDDirectoryRoleTemplates.ps1

<#
.SYNOPSIS
    Lists all available Directory Rules and Templates (Built-in Roles).

.DESCRIPTION
    Exports the definitions of all Entra ID text-based roles (e.g. "Global Administrator", "Helpdesk Admin").
    Includes the description and verify if they are enabled.
    Useful for understanding the RBAC landscape.

.NOTES
    File Name  : 119_Get-EntraIDDirectoryRoleTemplates.ps1
    Author     : Kaffeeundcode
    Version    : 1.0
#>

try {
    Connect-MgGraph -Scopes "RoleManagement.Read.Directory" -ErrorAction Stop
} catch {
    Write-Error "Login failed"
    exit
}

$Roles = Get-MgRoleManagementDirectoryRoleDefinition -All

$Report = @()

foreach ($Role in $Roles) {
    $Report += [PSCustomObject]@{
        RoleName = $Role.DisplayName
        Description = $Role.Description
        IsBuiltIn = $Role.IsBuiltIn
        Id = $Role.Id
        TemplateId = $Role.TemplateId
    }
}

$Report | Sort-Object RoleName | Format-Table RoleName, Description -AutoSize

$Path = "$PSScriptRootDirectory_Role_Definitions.csv"
$Report | Export-Csv -Path $Path -NoTypeInformation
Write-Host "Exported to $Path" -ForegroundColor Green