last sync: 2025-Apr-29 17:09:03 Etc/UTC

Reports Reader - 4a5d8f65-41da-4de4-8968-e035b65339cf
Entra Id Role definition

Display name Reports Reader
Id 4a5d8f65-41da-4de4-8968-e035b65339cf
Description Can read sign-in and audit reports.
Detailed description Users with this role can view usage reporting data and the reports dashboard in Office 365 admin center and the adoption context pack in Power BI. Additionally, the role provides access to sign-on reports and activity in Microsoft Entra ID and data returned by the Microsoft Graph reporting API. A user assigned to the Reports Reader role can access only relevant usage and adoption metrics. They don't have any admin permissions to configure settings or access the product specific admin centers like Exchange.
Categories readOnly,securityAndCompliance
isPrivileged False
EntraOps Tier Level ManagementPlane
#Resource Actions unique 61
#Resource Actions Operations unique 61
#Resource Actions privileged 0
#Resource Actions direct 7
Resource Actions inherited True
#Resource Actions inherited 54
Resource Actions inherited from Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
#Resource Actions overlap direct&inherited 0
Resource Actions overlap direct&inherited
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 61
#NameSpaces 5
NameSpaces microsoft.azure.serviceHealth: 1
microsoft.directory: 57
microsoft.office365.network: 1
microsoft.office365.usageReports: 1
microsoft.office365.webPortal: 1
Actions allTasks: 1
read: 60
Operations actionVerbs GET: 60
n/a: 1
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id}