Az
EntraIdRoles
Advertizer
Show Menu
Hide Menu
Home
Policy
Changes
All
Initiative
Changes
All
Alias
Changes
All
Compliance
aggregated
byPolicy
ResourceTypes
Azure Access control
Azure RBAC Role - changes
Azure RBAC Role - all
Azure RBAC Resource Provider Operations
Entra-Id Access control
Microsoft Entra ID Roles
Microsoft Entra ID Role Actions
Microsoft Entra ID API permissions
CatchUp
SavillTech
Links
Info
Feedback
last sync: 2025-Nov-02 17:01:22 Etc/UTC
Microsoft Entra ID built-in Roles [v1.0]
(126)
All Microsoft Entra Id Role Actions
EntraOps
Roles:
All 126
AI Administrator
Application Administrator
Application Developer
Attack Payload Author
Attack Simulation Administrator
Attribute Assignment Administrator
Attribute Assignment Reader
Attribute Definition Administrator
Attribute Definition Reader
Attribute Log Administrator
Attribute Log Reader
Attribute Provisioning Administrator
Attribute Provisioning Reader
Authentication Administrator
Authentication Extensibility Administrator
Authentication Policy Administrator
Azure AD Joined Device Local Administrator
Azure DevOps Administrator
Azure Information Protection Administrator
B2C IEF Keyset Administrator
B2C IEF Policy Administrator
Billing Administrator
Cloud App Security Administrator
Cloud Application Administrator
Cloud Device Administrator
Compliance Administrator
Compliance Data Administrator
Conditional Access Administrator
Customer LockBox Access Approver
Desktop Analytics Administrator
Device Join
Device Managers
Device Users
Directory Readers
Directory Synchronization Accounts
Directory Writers
Domain Name Administrator
Dragon Administrator
Dynamics 365 Administrator
Dynamics 365 Business Central Administrator
Edge Administrator
Exchange Administrator
Exchange Backup Administrator
Exchange Recipient Administrator
Extended Directory User Administrator
External ID User Flow Administrator
External ID User Flow Attribute Administrator
External Identity Provider Administrator
Fabric Administrator
Global Administrator
Global Reader
Global Secure Access Administrator
Global Secure Access Log Reader
Groups Administrator
Guest Inviter
Guest User
Helpdesk Administrator
Hybrid Identity Administrator
Identity Governance Administrator
Insights Administrator
Insights Analyst
Insights Business Leader
Intune Administrator
IoT Device Administrator
Kaizala Administrator
Knowledge Administrator
Knowledge Manager
License Administrator
Lifecycle Workflows Administrator
Message Center Privacy Reader
Message Center Reader
Microsoft 365 Backup Administrator
Microsoft 365 Migration Administrator
Microsoft Graph Data Connect Administrator
Microsoft Hardware Warranty Administrator
Microsoft Hardware Warranty Specialist
Network Administrator
Office Apps Administrator
On Premises Directory Sync Account
Organizational Branding Administrator
Organizational Data Source Administrator
Organizational Messages Approver
Organizational Messages Writer
Partner Tier1 Support
Partner Tier2 Support
Password Administrator
People Administrator
Permissions Management Administrator
Places Administrator
Power Platform Administrator
Printer Administrator
Printer Technician
Privileged Authentication Administrator
Privileged Role Administrator
Reports Reader
Restricted Guest User
Search Administrator
Search Editor
Security Administrator
Security Operator
Security Reader
Service Support Administrator
SharePoint Administrator
SharePoint Backup Administrator
SharePoint Embedded Administrator
Skype for Business Administrator
Teams Administrator
Teams Communications Administrator
Teams Communications Support Engineer
Teams Communications Support Specialist
Teams Devices Administrator
Teams Reader
Teams Telephony Administrator
Tenant Creator
Usage Summary Reports Reader
User
User Administrator
User Experience Success Manager
Virtual Visits Administrator
Viva Glint Tenant Administrator
Viva Goals Administrator
Viva Pulse Administrator
Windows 365 Administrator
Windows Update Deployment Administrator
Workplace Device Join
Yammer Administrator
isPrivileged:
All 2
true
false
inherts permissions:
All 2
true
false
conditioned permissions:
category:
All 8
collaboration
devices
global
identity
other
readOnly
securityAndCompliance
EntraOpsTierLevel:
All 4
ControlPlane
ManagementPlane
Unclassified
UserAccess
pageSize:
10
100
126