Created by Claude - please verify

Entitlement management - assignment policies (approval, review, expiry, who may request) and delivered assignments.

Required Microsoft Graph permissions

EntitlementManagement.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P2 / Entra ID Governance.

Endpoints: GET /v1.0/identityGovernance/entitlementManagement/assignmentPolicies?$expand=accessPackage · GET /v1.0/identityGovernance/entitlementManagement/assignments?$expand=target,accessPackage

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Access Package Assignment Health

Access packages are only as good as their policies: requests without approval, assignments that never expire and no recurring review turn them into a self-service door. This report checks every policy and lists assignments that never expire, that expire in the next 30 days, and that belong to external users from connected organisations.