AzEntraIdRolesAdvertizer

last sync: 2025-Apr-29 17:09:03 Etc/UTC

Password Administrator - 966707d0-3269-4727-9be2-8c3a10f19b9d
Entra Id Role definition

Display name Password Administrator
Id 966707d0-3269-4727-9be2-8c3a10f19b9d
Description Can reset passwords for non-administrators and Password Administrators.
Detailed description Users with this role have limited ability to manage passwords. This role does not grant the ability to manage service requests or monitor service health. Password administrators can reset passwords of other users who are non-administrators or members of the following roles only:
* Directory readers
* Guest inviter
* Password administrator
Categories identity
isPrivileged True Privileged
EntraOps Tier Level ControlPlane
#Resource Actions unique 56
#Resource Actions Operations unique 56
#Resource Actions privileged 1
#Resource Actions direct 2
Resource Actions inherited True
#Resource Actions inherited 54
Resource Actions inherited from Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
#Resource Actions overlap direct&inherited 0
Resource Actions overlap direct&inherited
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 56
#NameSpaces 2
NameSpaces microsoft.directory: 55
microsoft.office365.webPortal: 1
Actions read: 55
update: 1
Operations actionVerbs GET: 55
PATCH: 1
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id}