last sync: 2025-Apr-29 17:09:03 Etc/UTC

AI Administrator - d2562ede-74db-457e-a7b6-544e236ebb61
Entra Id Role definition

Display name AI Administrator
Id d2562ede-74db-457e-a7b6-544e236ebb61
Description Manage all aspects of Microsoft 365 Copilot and AI-related enterprise services in Microsoft 365.
Detailed description Assign the AI Administrator role to users who need to do the following tasks:
* Manage all aspects of Microsoft 365 Copilot
* Manage AI-related enterprise services, extensibility, and copilot agents from the Integrated apps page in the Microsoft 365 admin center
* Approve and publish line-of-business copilot agents
* Allow users to install an app or install an app for users in the organization if the app does not require permission
* Read and configure Azure and Microsoft 365 service health dashboards
* View usage reports, adoption insights, and organizational insight
* Create and manage support tickets in Azure and the Microsoft 365 admin center
Categories collaboration,identity
isPrivileged False
EntraOps Tier Level ManagementPlane
#Resource Actions unique 64
#Resource Actions Operations unique 64
#Resource Actions privileged 0
#Resource Actions direct 10
Resource Actions inherited True
#Resource Actions inherited 54
Resource Actions inherited from Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
#Resource Actions overlap direct&inherited 0
Resource Actions overlap direct&inherited
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 64
#NameSpaces 11
NameSpaces microsoft.azure.serviceHealth: 1
microsoft.azure.supportTickets: 1
microsoft.directory: 54
microsoft.office365.copilot: 1
microsoft.office365.messageCenter: 1
microsoft.office365.network: 1
microsoft.office365.search: 1
microsoft.office365.serviceHealth: 1
microsoft.office365.supportTickets: 1
microsoft.office365.usageReports: 1
microsoft.office365.webPortal: 1
Actions allTasks: 5
manage: 1
read: 58
Operations actionVerbs GET: 58
n/a: 6
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id}