Az
EntraIdRoleActions
Advertizer
Menu
Home
Policy
Changes
All
Initiative
Changes
All
Alias
Changes
All
Compliance
aggregated
byPolicy
ResourceTypes
Azure Access control
Azure RBAC Role - changes
Azure RBAC Role - all
Azure RBAC Resource Provider Operations
Entra-Id Access control
Microsoft Entra ID Roles
Microsoft Entra ID Role Actions
Microsoft Entra ID API permissions
CatchUp
SavillTech
Links
Info
Feedback
last sync: 2025-Jun-07 17:10:26 Etc/UTC
Microsoft Entra ID Role Actions [v1.0] (802 actions, 840 operations)
All Microsoft Entra Id Role definitions
EntraOps
permissionVerb:
All
DELETE (88)
GET (265)
n/a (131)
PATCH (180)
POST (173)
PUT (3)
permissionPhrase:
All
add (10)
allTasks (128)
assignLicense (3)
create (49)
createAsOwner (11)
delete (48)
disable (3)
enable (3)
limitedRead (18)
manage (10)
managePermissionGrantsForAll (9)
managePermissionGrantsForOwnedResource (6)
managePermissionGrantsForResource (6)
managePermissionGrantsForSelf (7)
other (20)
read (236)
remove (10)
reprocessLicenseAssignment (3)
restore (10)
restrictedRead (11)
update (239)
permissionNamespace:
All 56
microsoft.azure.advancedThreatProtection (1)
microsoft.azure.customSecurityAttributeDiagnosticSettings (1)
microsoft.azure.devOps (1)
microsoft.azure.informationProtection (1)
microsoft.azure.print (6)
microsoft.azure.serviceHealth (1)
microsoft.azure.supportTickets (1)
microsoft.backup (17)
microsoft.cloudPC (2)
microsoft.commerce.billing (3)
microsoft.commerce.volumeLicenseServiceCenter (1)
microsoft.directory (702)
microsoft.dynamics365 (1)
microsoft.dynamics365.businessCentral (1)
microsoft.edge (2)
microsoft.flow (1)
microsoft.graph.dataConnect (2)
microsoft.hardware.support (7)
microsoft.insights (5)
microsoft.intune (2)
microsoft.microsoft365.organizationalData (2)
microsoft.networkAccess (3)
microsoft.office365.complianceManager (1)
microsoft.office365.copilot (2)
microsoft.office365.desktopAnalytics (1)
microsoft.office365.exchange (4)
microsoft.office365.fileStorageContainers (2)
microsoft.office365.knowledge (5)
microsoft.office365.lockbox (1)
microsoft.office365.messageCenter (2)
microsoft.office365.migrations (1)
microsoft.office365.network (2)
microsoft.office365.organizationalMessages (3)
microsoft.office365.protectionCenter (11)
microsoft.office365.search (2)
microsoft.office365.securityComplianceCenter (2)
microsoft.office365.serviceHealth (1)
microsoft.office365.sharePoint (1)
microsoft.office365.skypeForBusiness (1)
microsoft.office365.supportTickets (1)
microsoft.office365.usageReports (2)
microsoft.office365.userCommunication (1)
microsoft.office365.webPortal (1)
microsoft.office365.yammer (2)
microsoft.people (4)
microsoft.peopleAdmin (2)
microsoft.permissionsManagement (2)
microsoft.powerApps (1)
microsoft.powerApps.powerBI (1)
microsoft.teams (7)
microsoft.virtualVisits (2)
microsoft.viva.glint (2)
microsoft.viva.goals (2)
microsoft.viva.pulse (2)
microsoft.windows.defenderAdvancedThreatProtection (1)
microsoft.windows.updatesDeployments (2)
isPrivileged:
All 2
true
false
isUsedByRoles:
All 2
true
false
EntraOpsTierLevel:
All 4
ControlPlane (304)
ManagementPlane (226)
n/a (227)
UserAccess (83)
EntraOpsService:
All 51
Application and Workload Identity (69)
Authentication (14)
Azure DevOps (1)
Business Apps Management (3)
Cloud Access Security Broker (1)
Cloud Infrastructure Entitlement Management (2)
Conditional Access (28)
Cross Tenant Partner Management (4)
Default member (60)
Dynamics 365 (2)
Entitlement Management (12)
External Identities (6)
Global Endpoint Credential Management (2)
Global Endpoint Management (33)
Global Secure Access Management (1)
Global Security and Compliance Management (5)
Global User Management (24)
Group Management (40)
Guest user (22)
Hybrid Identity Synchronization (1)
Identity Threat Detection and Response (3)
License Management (6)
Microsoft 365 Backup (17)
Microsoft 365 Billing Management (4)
Microsoft 365 Group Management (10)
Microsoft 365 Platform Operations (14)
Microsoft 365 Support Operations (8)
Microsoft Copilot (1)
Microsoft Exchange Online (7)
Microsoft Information Protection (1)
Microsoft People (1)
Microsoft SharePoint (2)
Microsoft Viva (9)
Multi Tenant Management (6)
n/a (227)
Printer Management (6)
Private Secure Access (4)
Privileged ABAC (6)
Privileged IAM (12)
Security and Compliance (18)
Support and Service Health (3)
Teams (10)
Tenant Configuration (Reader) (85)
Tenant Management (13)
Tenant Policy Management (9)
User Hardware Management (6)
User Lifecycle and Provisioning Management (9)
User Virtual Endpoint Management (3)
Verified ID (6)
Virtual Visits (2)
Yammer (2)
show UsedByRoles
ConsentPolicyApplies
ConsentPolicyDetails
pageSize:
10
100
840
resource action
consent policy applies
#operations
permission id
permission namespace
permission description
isPrivileged
permission verb
permission phrase
is used by Roles
#used by Roles
used by Roles
#used by Roles conditioned
used by Roles conditioned
EntraOps TierLevel
EntraOps Service
Loading...
0
to
0
of
0
Page
0
of
0