title: Azure AD - Manage Group & User Assignments
body: <p><em>I am an Azure Global Tenant Admin for our [Premium] Azure AD instance. I have a Web App that requires Group/User Assignment to access. We need to know which Groups and Users have been assigned access. The Azure UI does not let you query this information so I am wondering if there is any way to obtain a list of Groups/Users that have been assigned access to a Web App.</em></p>
  <p>Edit: It looks like the Graph API version 1.5 now supports this. I can download the servicePrincipal ODATA with this URL:</p>
  <pre><code>GET string.Format(&quot;https://graph.windows.net/{0}/servicePrincipals?api-version=1.5&amp;$filter=appId+eq+'{1}'&quot;,
      tenant, clientId)
  </code></pre>
  <p><a href="https://blogs.msdn.microsoft.com/aadgraphteam/2014/12/12/announcing-the-new-version-of-graph-api-api-version1-5/" rel="nofollow noreferrer">According to this MSDN post</a>, I should be able to use a URL format like</p>
  <pre><code>GET string.Format(&quot;https://graph.windows.net/{0}/servicePrincipals/{1}/appRoleAssignedTo?api-version=1.5&quot;,
      tenant, clientId)
  </code></pre>
  <p>However, I am receiving this error:</p>
  <blockquote>
  <p>&quot;Resource 'f4126638-cb47-48df-ad9d-57c0684b6575' does not exist or one of its queried reference-property objects are not present.&quot;}</p>
  </blockquote>