| Display name | Security Reader | ||
|---|---|---|---|
| Id | 5d6b6bb7-de71-4623-b4af-96380a352509 | ||
| Description | Can read security information and reports in Microsoft Entra ID and Office 365. | ||
| Detailed description | Users with this role have global read-only access, including all information in Microsoft Entra ID Protection, Privileged Identity Management, as well as the ability to read Microsoft Entra sign-in reports and audit logs. The role also grants read-only permission in Office 365 Security & Compliance Center | ||
| Categories | readOnly,securityAndCompliance | ||
| isPrivileged | True Privileged | ||
| EntraOps Tier Level | ControlPlane | ||
| #Resource Actions unique | 86 | ||
| #Resource Actions Operations unique | 86 | ||
| #Resource Actions privileged | 1 | ||
| #Resource Actions direct | 32 | ||
| Resource Actions inherited | True | ||
| #Resource Actions inherited | 54 | ||
| Resource Actions inherited from | Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b) | ||
| #Resource Actions overlap direct&inherited | 0 | ||
| Resource Actions overlap direct&inherited | |||
| #Resource Actions inherited to | 0 other Entra Id Roles | ||
| Resource Actions inherited to | n/a | ||
| #Resource Actions conditioned | 0 | ||
| #Resource Actions unconditioned | 86 | ||
| #NameSpaces | 6 | ||
| NameSpaces | microsoft.azure.serviceHealth: 1 microsoft.directory: 78 microsoft.networkAccess: 1 microsoft.office365.protectionCenter: 4 microsoft.office365.serviceHealth: 1 microsoft.office365.webPortal: 1 |
||
| Actions | allTasks: 2 read: 84 |
||
| Operations actionVerbs | GET: 84 n/a: 2 |
||
| Resource Actions where Consent Policy applies | 0 | ||
| Resource Actions / Consent Policy | n/a | ||
| JSON enriched |
|
||
| JSON raw (v1.0 endpoint) |
|
||
| JSON raw (beta endpoint) |
|