Describe Azure/AzCli/GraphSPN here.

* Get Graph roles

az ad sp show --id 00000003-0000-0000-c000-000000000000 --query "appRoles[?starts_with(value, 'Mail.')].[value, id]" --output table
Column1             Column