| Display name | External ID User Flow Administrator | ||
|---|---|---|---|
| Id | 6e591065-9bad-43ed-90f3-e9424366d2f0 | ||
| Description | Can create and manage all aspects of user flows. | ||
| Detailed description | Users with this role can create and manage user flows (also called "built-in" policies) in the Azure portal. These users can customize HTML/CSS/JavaScript content, change MFA requirements, select claims in the token, manage API connectors and their credentials, and configure session settings for all user flows in the Microsoft Entra organization. On the other hand, this role does not include the ability to review user data or make changes to the attributes that are included in the organization schema. Changes to Identity Experience Framework policies (also known as custom policies) are also outside the scope of this role. | ||
| Categories | identity | ||
| isPrivileged | False | ||
| EntraOps Tier Level | ControlPlane | ||
| #Resource Actions unique | 55 | ||
| #Resource Actions Operations unique | 55 | ||
| #Resource Actions privileged | 0 | ||
| #Resource Actions direct | 1 | ||
| Resource Actions inherited | True | ||
| #Resource Actions inherited | 54 | ||
| Resource Actions inherited from | Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b) | ||
| #Resource Actions overlap direct&inherited | 0 | ||
| Resource Actions overlap direct&inherited | |||
| #Resource Actions inherited to | 0 other Entra Id Roles | ||
| Resource Actions inherited to | n/a | ||
| #Resource Actions conditioned | 0 | ||
| #Resource Actions unconditioned | 55 | ||
| #NameSpaces | 1 | ||
| NameSpaces | microsoft.directory: 55 | ||
| Actions | allTasks: 1 read: 54 |
||
| Operations actionVerbs | GET: 54 n/a: 1 |
||
| Resource Actions where Consent Policy applies | 0 | ||
| Resource Actions / Consent Policy | n/a | ||
| JSON enriched |
|
||
| JSON raw (v1.0 endpoint) |
|
||
| JSON raw (beta endpoint) |
|