AAD V2 Powershell Script to Get Roles for Service Principal via App Name

connect-azuread

$appname = "Your-App-Registration-Name"

$sp = Get-AzureADServicePrincipal -filter "DisplayName eq '$appname'"

$role = Get-AzureADDirectoryRole

For ($i=0; $i -lt $role.Count; $i++){

    if(Get-AzureADDirectoryRoleMember -ObjectId $role.Get($i) | | where {$_.DisplayName -eq $appname}) {
        $role.DisplayName
    }
    
}