| Display name | Authentication Extensibility Administrator | ||
|---|---|---|---|
| Id | 25a516ed-2fa0-40ea-a2d0-12923a21473a | ||
| Description | Customize sign in and sign up experiences for users by creating and managing custom authentication extensions. | ||
| Detailed description | Users with this role can create and manage all aspects of custom authentication extensions. A custom authentication extension is an API endpoint created by a developer for authentication events and is registered in Microsoft Entra ID. Application administrators and application owners can use custom authentication extensions to customize their application's authentication experiences such as sign in and sign up, or password reset. This role does not grant the ability to apply the custom authentication extensions to applications. | ||
| Categories | identity | ||
| isPrivileged | True Privileged | ||
| EntraOps Tier Level | ControlPlane | ||
| #Resource Actions unique | 55 | ||
| #Resource Actions Operations unique | 55 | ||
| #Resource Actions privileged | 1 | ||
| #Resource Actions direct | 1 | ||
| Resource Actions inherited | True | ||
| #Resource Actions inherited | 54 | ||
| Resource Actions inherited from | Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b) | ||
| #Resource Actions overlap direct&inherited | 0 | ||
| Resource Actions overlap direct&inherited | |||
| #Resource Actions inherited to | 0 other Entra Id Roles | ||
| Resource Actions inherited to | n/a | ||
| #Resource Actions conditioned | 0 | ||
| #Resource Actions unconditioned | 55 | ||
| #NameSpaces | 1 | ||
| NameSpaces | microsoft.directory: 55 | ||
| Actions | allTasks: 1 read: 54 |
||
| Operations actionVerbs | GET: 54 n/a: 1 |
||
| Resource Actions where Consent Policy applies | 0 | ||
| Resource Actions / Consent Policy | n/a | ||
| JSON enriched |
|
||
| JSON raw (v1.0 endpoint) |
|
||
| JSON raw (beta endpoint) |
|