AzEntraIdRolesAdvertizer

last sync: 2025-Aug-20 17:01:34 Etc/UTC

Guest Inviter - 95e79109-95c0-4d8e-aee3-d01accf2d47b
Entra Id Role definition

Display name Guest Inviter
Id 95e79109-95c0-4d8e-aee3-d01accf2d47b
Description Can invite guest users independent of the 'members can invite guests' setting.
Detailed description Users in this role can manage Microsoft Entra B2B guest user invitations when the "Members can invite" user setting is set to No. It does not include any other permissions.
Categories identity
isPrivileged False
EntraOps Tier Level UserAccess
#Resource Actions unique 38
#Resource Actions Operations unique 38
#Resource Actions privileged 0
#Resource Actions direct 16
Resource Actions inherited True
#Resource Actions inherited 23
Resource Actions inherited from Guest User (10dae51f-b6af-4016-8d66-8c2a99b929b3)
#Resource Actions overlap direct&inherited 1
Resource Actions overlap direct&inherited microsoft.directory/users/inviteGuest
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 38
#NameSpaces 1
NameSpaces microsoft.directory: 38
Actions limitedRead: 18
other: 1
read: 19
Operations actionVerbs GET: 37
POST: 1
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched 
{29 items}
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id} 
{12 items
  • @odata.context: "https://graph.microsoft.com/v1.0/$metadata#roleManagement/directory/roleDefinitions/$entity",
  • id: "95e79109-95c0-4d8e-aee3-d01accf2d47b",
  • description: "Can invite guest users independent of the 'members can invite guests' setting.",
  • displayName: "Guest Inviter",
  • isBuiltIn: true,
  • isEnabled: true,
  • resourceScopes: [1 item
    • "/"
    ],
  • templateId: "95e79109-95c0-4d8e-aee3-d01accf2d47b",
  • version: "1",
  • rolePermissions: [1 item
    • {2 items
      • allowedResourceActions: [16 items
        • "microsoft.directory/users/appRoleAssignments/read",
        • "microsoft.directory/users/deviceForResourceAccount/read",
        • "microsoft.directory/users/directReports/read",
        • "microsoft.directory/users/invitedBy/read",
        • "microsoft.directory/users/inviteGuest",
        • "microsoft.directory/users/licenseDetails/read",
        • "microsoft.directory/users/manager/read",
        • "microsoft.directory/users/memberOf/read",
        • "microsoft.directory/users/oAuth2PermissionGrants/read",
        • "microsoft.directory/users/ownedDevices/read",
        • "microsoft.directory/users/ownedObjects/read",
        • "microsoft.directory/users/photo/read",
        • "microsoft.directory/users/registeredDevices/read",
        • "microsoft.directory/users/scopedRoleMemberOf/read",
        • "microsoft.directory/users/sponsors/read",
        • "microsoft.directory/users/standard/read"
        ],
      • condition: null
      }
    ],
  • inheritsPermissionsFrom@odata.context: "https://graph.microsoft.com/v1.0/$metadata#roleManagement/directory/roleDefinitions('95e79109-95c0-4d8e-aee3-d01accf2d47b')/inheritsPermissionsFrom",
  • inheritsPermissionsFrom: [1 item
    • {1 item
      • id: "10dae51f-b6af-4016-8d66-8c2a99b929b3"
      }
    ]
}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id} 
{16 items
  • @odata.context: "https://graph.microsoft.com/beta/$metadata#roleManagement/directory/roleDefinitions/$entity",
  • id: "95e79109-95c0-4d8e-aee3-d01accf2d47b",
  • assignmentMode: "allowed",
  • categories: "identity",
  • description: "Can invite guest users independent of the 'members can invite guests' setting.",
  • displayName: "Guest Inviter",
  • isBuiltIn: true,
  • isEnabled: true,
  • isPrivileged: false,
  • resourceScopes: [1 item
    • "/"
    ],
  • richDescription: "Users in this role can manage Microsoft Entra B2B guest user invitations when the "Members can invite" user setting is set to No. It does not include any other permissions.",
  • templateId: "95e79109-95c0-4d8e-aee3-d01accf2d47b",
  • version: "1",
  • rolePermissions: [1 item
    • {2 items
      • allowedResourceActions: [16 items
        • "microsoft.directory/users/appRoleAssignments/read",
        • "microsoft.directory/users/deviceForResourceAccount/read",
        • "microsoft.directory/users/directReports/read",
        • "microsoft.directory/users/invitedBy/read",
        • "microsoft.directory/users/inviteGuest",
        • "microsoft.directory/users/licenseDetails/read",
        • "microsoft.directory/users/manager/read",
        • "microsoft.directory/users/memberOf/read",
        • "microsoft.directory/users/oAuth2PermissionGrants/read",
        • "microsoft.directory/users/ownedDevices/read",
        • "microsoft.directory/users/ownedObjects/read",
        • "microsoft.directory/users/photo/read",
        • "microsoft.directory/users/registeredDevices/read",
        • "microsoft.directory/users/scopedRoleMemberOf/read",
        • "microsoft.directory/users/sponsors/read",
        • "microsoft.directory/users/standard/read"
        ],
      • condition: null
      }
    ],
  • inheritsPermissionsFrom@odata.context: "https://graph.microsoft.com/beta/$metadata#roleManagement/directory/roleDefinitions('95e79109-95c0-4d8e-aee3-d01accf2d47b')/inheritsPermissionsFrom",
  • inheritsPermissionsFrom: [1 item
    • {1 item
      • id: "10dae51f-b6af-4016-8d66-8c2a99b929b3"
      }
    ]
}