AzEntraIdRolesAdvertizer

last sync: 2025-Apr-29 17:09:03 Etc/UTC

SharePoint Administrator - f28a1f50-f6e7-4571-818b-6a12f2af6b6c
Entra Id Role definition

Display name SharePoint Administrator
Id f28a1f50-f6e7-4571-818b-6a12f2af6b6c
Description Can manage all aspects of the SharePoint service.
Detailed description Users with this role have global permissions within Microsoft SharePoint Online, when the service is present, as well as the ability to manage support tickets and monitor service health.
Categories collaboration
isPrivileged False
EntraOps Tier Level ManagementPlane
#Resource Actions unique 81
#Resource Actions Operations unique 84
#Resource Actions privileged 0
#Resource Actions direct 27
Resource Actions inherited True
#Resource Actions inherited 54
Resource Actions inherited from Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
#Resource Actions overlap direct&inherited 0
Resource Actions overlap direct&inherited
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 81
#NameSpaces 11
NameSpaces microsoft.azure.serviceHealth: 1
microsoft.azure.supportTickets: 1
microsoft.backup: 10
microsoft.directory: 62
microsoft.office365.migrations: 1
microsoft.office365.network: 1
microsoft.office365.serviceHealth: 1
microsoft.office365.sharePoint: 1
microsoft.office365.supportTickets: 1
microsoft.office365.usageReports: 1
microsoft.office365.webPortal: 1
Actions allTasks: 16
create: 1
delete: 1
read: 58
restore: 1
update: 4
Operations actionVerbs DELETE: 3
GET: 58
n/a: 16
PATCH: 2
POST: 5
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id}