last sync: 2025-Apr-29 17:09:03 Etc/UTC

Cloud App Security Administrator - 892c5842-a9a6-463a-8041-72aa08ca3cf6
Entra Id Role definition

Display name Cloud App Security Administrator
Id 892c5842-a9a6-463a-8041-72aa08ca3cf6
Description Can manage all aspects of the Cloud App Security product.
Detailed description Users with this role have full permissions in Cloud App Security. They can add admins, add MCAS policies and settings, upload logs and perform governance actions.
Categories collaboration,identity,securityAndCompliance
isPrivileged False
EntraOps Tier Level ControlPlane
#Resource Actions unique 56
#Resource Actions Operations unique 56
#Resource Actions privileged 0
#Resource Actions direct 2
Resource Actions inherited True
#Resource Actions inherited 54
Resource Actions inherited from Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
#Resource Actions overlap direct&inherited 0
Resource Actions overlap direct&inherited
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 56
#NameSpaces 2
NameSpaces microsoft.directory: 55
microsoft.office365.webPortal: 1
Actions allTasks: 1
read: 55
Operations actionVerbs GET: 55
n/a: 1
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id}