| Display name | Global Secure Access Log Reader | ||
|---|---|---|---|
| Id | 843318fb-79a6-4168-9e6f-aa9a07481cc4 | ||
| Description | Provides designated security personnel with read-only access to network traffic logs in Microsoft Entra Internet Access and Microsoft Entra Private Access for detailed analysis. | ||
| Detailed description | Assign the Global Secure Access Log Reader role to users who need to do the following: * Read network traffic logs in Microsoft Entra Internet Access and Microsoft Entra Private Access for analysis by designated security personnel * View log details such as session, connection, and transaction * Filter logs based on criteria such as IP address and domain |
||
| Categories | identity,readOnly | ||
| isPrivileged | False | ||
| EntraOps Tier Level | ManagementPlane | ||
| #Resource Actions unique | 55 | ||
| #Resource Actions Operations unique | 55 | ||
| #Resource Actions privileged | 0 | ||
| #Resource Actions direct | 1 | ||
| Resource Actions inherited | True | ||
| #Resource Actions inherited | 54 | ||
| Resource Actions inherited from | Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b) | ||
| #Resource Actions overlap direct&inherited | 0 | ||
| Resource Actions overlap direct&inherited | |||
| #Resource Actions inherited to | 0 other Entra Id Roles | ||
| Resource Actions inherited to | n/a | ||
| #Resource Actions conditioned | 0 | ||
| #Resource Actions unconditioned | 55 | ||
| #NameSpaces | 2 | ||
| NameSpaces | microsoft.directory: 54 microsoft.networkAccess: 1 |
||
| Actions | read: 55 | ||
| Operations actionVerbs | GET: 55 | ||
| Resource Actions where Consent Policy applies | 0 | ||
| Resource Actions / Consent Policy | n/a | ||
| JSON enriched |
|
||
| JSON raw (v1.0 endpoint) |
|
||
| JSON raw (beta endpoint) |
|