AzEntraIdRolesAdvertizer

last sync: 2025-Apr-29 17:09:03 Etc/UTC

Security Administrator - 194ae4cb-b126-40b2-bd5b-6091b380977d
Entra Id Role definition

Display name Security Administrator
Id 194ae4cb-b126-40b2-bd5b-6091b380977d
Description Can read security information and reports, and manage configuration in Microsoft Entra ID and Office 365.
Detailed description Users with this role have all of the read-only permissions of the Security reader role, plus the ability to manage configuration for security-related services: Microsoft Entra ID Protection, Azure Information Protection, Privileged Identity Management, and Office 365 Security & Compliance Center.
Categories securityAndCompliance
isPrivileged True Privileged
EntraOps Tier Level ControlPlane
#Resource Actions unique 134
#Resource Actions Operations unique 138
#Resource Actions privileged 5
#Resource Actions direct 80
Resource Actions inherited True
#Resource Actions inherited 54
Resource Actions inherited from Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
#Resource Actions overlap direct&inherited 0
Resource Actions overlap direct&inherited
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 134
#NameSpaces 8
NameSpaces microsoft.azure.serviceHealth: 1
microsoft.azure.supportTickets: 1
microsoft.directory: 123
microsoft.networkAccess: 1
microsoft.office365.protectionCenter: 5
microsoft.office365.serviceHealth: 1
microsoft.office365.supportTickets: 1
microsoft.office365.webPortal: 1
Actions allTasks: 7
create: 8
delete: 6
other: 2
read: 81
update: 30
Operations actionVerbs DELETE: 9
GET: 81
n/a: 7
PATCH: 28
POST: 13
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id}