last sync: 2025-Apr-29 17:09:03 Etc/UTC

Windows Update Deployment Administrator - 32696413-001a-46ae-978c-ce0f6b3620d2
Entra Id Role definition

Display name Windows Update Deployment Administrator
Id 32696413-001a-46ae-978c-ce0f6b3620d2
Description Can create and manage all aspects of Windows Update deployments through the Windows Update for Business deployment service.
Detailed description Users in this role can create and manage all aspects of Windows Update deployments through the Windows Update for Business deployment service. The deployment service enables users to define settings for when and how updates are deployed and specify which updates are offered to groups of devices in their tenant. It also allows users to monitor the update progress.
Categories collaboration,identity
isPrivileged False
EntraOps Tier Level ControlPlane
#Resource Actions unique 55
#Resource Actions Operations unique 55
#Resource Actions privileged 0
#Resource Actions direct 1
Resource Actions inherited True
#Resource Actions inherited 54
Resource Actions inherited from Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
#Resource Actions overlap direct&inherited 0
Resource Actions overlap direct&inherited
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 55
#NameSpaces 2
NameSpaces microsoft.directory: 54
microsoft.windows.updatesDeployments: 1
Actions allTasks: 1
read: 54
Operations actionVerbs GET: 54
n/a: 1
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id}