AzEntraIdRolesAdvertizer

last sync: 2025-Apr-29 17:09:03 Etc/UTC

Global Reader - f2ef992c-3afb-46b9-b7cf-a126ee74c451
Entra Id Role definition

Display name Global Reader
Id f2ef992c-3afb-46b9-b7cf-a126ee74c451
Description Can read everything that a Global Administrator can, but not update anything.
Detailed description Users with this role can read everything that a Global Administrator can, but not update anything.
Categories readOnly
isPrivileged True Privileged
EntraOps Tier Level ControlPlane
#Resource Actions unique 150
#Resource Actions Operations unique 150
#Resource Actions privileged 2
#Resource Actions direct 96
Resource Actions inherited True
#Resource Actions inherited 54
Resource Actions inherited from Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
#Resource Actions overlap direct&inherited 0
Resource Actions overlap direct&inherited
#Resource Actions inherited to 0 other Entra Id Roles
Resource Actions inherited to n/a
#Resource Actions conditioned 0
#Resource Actions unconditioned 150
#NameSpaces 28
NameSpaces microsoft.azure.serviceHealth: 1
microsoft.backup: 1
microsoft.cloudPC: 1
microsoft.commerce.billing: 2
microsoft.directory: 119
microsoft.edge: 1
microsoft.graph.dataConnect: 1
microsoft.hardware.support: 3
microsoft.insights: 1
microsoft.networkAccess: 1
microsoft.office365.copilot: 1
microsoft.office365.fileStorageContainers: 1
microsoft.office365.messageCenter: 2
microsoft.office365.network: 1
microsoft.office365.organizationalMessages: 1
microsoft.office365.protectionCenter: 1
microsoft.office365.securityComplianceCenter: 1
microsoft.office365.serviceHealth: 1
microsoft.office365.usageReports: 1
microsoft.office365.webPortal: 1
microsoft.office365.yammer: 1
microsoft.permissionsManagement: 1
microsoft.teams: 1
microsoft.virtualVisits: 1
microsoft.viva.glint: 1
microsoft.viva.goals: 1
microsoft.viva.pulse: 1
microsoft.windows.updatesDeployments: 1
Actions allTasks: 2
other: 1
read: 146
restrictedRead: 1
Operations actionVerbs GET: 147
n/a: 2
POST: 1
Resource Actions where Consent Policy applies 0
Resource Actions / Consent Policy n/a
JSON enriched
JSON raw (v1.0 endpoint)
GET /roleManagement/directory/roleDefinitions/{id}
JSON raw (beta endpoint)
GET /roleManagement/directory/roleDefinitions/{id}