Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 271/271 feeds/APIs · 464/464 docs · checked 09:33 UTC Customize Public modeDiscuss ChangeIntel on Discord

Entra built-in roles and permissions

This page's changes and edits · All guidance changes

Microsoft's edit ·

Edits

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 17160a4 · +2 −2 lines · also on GitHub

⋯ 1 unchanged line
22 title: Microsoft Entra built-in roles
33 description: Describes the Microsoft Entra built-in roles and permissions.
44 ms.topic: reference
5 −ms.date: 04/22/2026
5 +ms.date: 04/29/2026
66 ms.reviewer: abhijeetsinha
77 ms.custom: generated, it-pro, fasttrack-edit, has-azure-ad-ps-ref, azure-ad-ref-level-one-done, sfi-ga-nochange
88 ---
⋯ 12 unchanged lines
2121 > | Role | Description | Template ID |
2222 > | --- | --- | --- |
2323 > | [Agent ID Administrator](#agent-id-administrator) | Manage all aspects of agents in a tenant including identity lifecycle operations for agent blueprints, agent service principals, agent identities, and agentic users.<br/>[![Privileged label icon.](./media/permissions-reference/privileged-label.png)](privileged-roles-permissions.md) | db506228-d27e-4b7d-95e5-295956d6615f |
24 −> | [Agent ID Developer](#agent-id-developer) | Create an agent blueprint and its service principal in a tenant. User will be added as an owner of the agent blueprint and its service principal. | adb2368d-a9be-41b5-8667-d96778e081b0 |
24 +> | [Agent ID Developer](#agent-id-developer) | Create an agent identity blueprint and its agent identity blueprint principal in a tenant. User will be added as an owner of the created agent identity blueprint and its agent identity blueprint principal. | adb2368d-a9be-41b5-8667-d96778e081b0 |
2525 > | [Agent Registry Administrator](#agent-registry-administrator) | Manage all aspects of the Agent Registry service in Microsoft Entra ID | 6b942400-691f-4bf0-9d12-d8a254a2baf5 |
2626 > | [AI Administrator](#ai-administrator) | Manage all aspects of Microsoft 365 Copilot and AI-related enterprise services in Microsoft 365.<br/>[![Privileged label icon.](./media/permissions-reference/privileged-label.png)](privileged-roles-permissions.md) | d2562ede-74db-457e-a7b6-544e236ebb61 |
2727 > | [AI Reader](#ai-reader) | Read all aspects of Microsoft 365 Copilot and AI-related enterprise services in Microsoft 365.<br/>[![Privileged label icon.](./media/permissions-reference/privileged-label.png)](privileged-roles-permissions.md) | 1fe13547-53f6-408d-ac04-7f8eed167b38 |
⋯ 704 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 08:48 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 23 Oct 09:33 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current