Microsoft Graph Scoped Role Memberships
Microsoft Graph Scoped Role Memberships let you programmatically assign and manage Azure AD (Microsoft Entra ID) directory roles with a limited scope to an administrative unit, rather than tenant-wide. Exposed through the scopedRoleMembership resource, these assignments delegate administrative permissions (for example, User Administrator or Helpdesk Administrator) so that the assignee’s authority applies only to the users, groups, or other objects contained in a specific administrative unit.