Microsoft Entra ID Governance

Examples for Entra ID governance features — terms of use, access reviews, PIM, and entitlement management.

---

Prerequisites

Permission	Description	Reference
Agreement.Read.All	Read terms of use agreements and acceptances	Governance permissions
AccessReview.Read.All	List access review definitions and decisions
EntitlementManagement.Read.All	Read access packages and assignments
Directory.Read.All	Read PIM directory role assignments
User.Read.All	Read users for compliance reporting

---

Examples

Scenario	File	Permission
Terms of use — list agreements, check acceptances, find pending users	terms_of_use.py	Agreement.Read.All
Access reviews — definitions, instances	access_reviews.py	AccessReview.Read.All
Access review pending decisions	pending_decisions.py	AccessReview.Read.All
PIM role assignments — who has privileged roles	privileged_roles.py	Directory.Read.All
Entitlement management access packages	entitlement_packages.py	EntitlementManagement.Read.All

---

Quick start

from office365.graph_client import GraphClient

client = GraphClient(tenant="contoso.onmicrosoft.com").with_client_secret("client_id", "client_secret")

agreements = client.identity_governance.terms_of_use.agreements.get().execute_query()
for a in agreements:
    print(a.display_name)

---

Official docs

• Microsoft Entra ID Governance API
• Access reviews API
• Terms of use API
• PIM API
• Entitlement management API