Entra built-in roles and permissions
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 270c10a · +6 −1 lines · also on GitHub
⋯ 1 unchanged line
22
title: Microsoft Entra built-in roles
33
description: Describes the Microsoft Entra built-in roles and permissions.
44
ms.topic: reference
5
−ms.date: 06/24/2026
5
+ms.date: 06/30/2026
66
ms.reviewer: abhijeetsinha
77
ms.custom: generated, it-pro, fasttrack-edit, has-azure-ad-ps-ref, azure-ad-ref-level-one-done, sfi-ga-nochange
88
---
⋯ 58 unchanged lines
6767
> | [Edge Administrator](#edge-administrator) | Manage all aspects of Microsoft Edge. | 3f1acade-1e04-4fbc-9b69-f0302cd84aef |
6868
> | [Entra Backup Administrator](#entra-backup-administrator) | Manage all aspects of Microsoft Entra Backup, such as create recovery jobs and manage backup snapshots. | b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb |
6969
> | [Entra Backup Reader](#entra-backup-reader) | Read all aspects of Microsoft Entra Backup, such as list all preview jobs, recovery jobs, backup snapshots, and create preview jobs. | f42252d9-5400-4d7b-b9ef-cc582dbb8577 |
70
+> | [Entra Customer Lockbox Approver](#entra-customer-lockbox-approver) | Can approve customer lockbox requests for accessing customer data in Entra ID. | d35481f7-cda1-4fa2-8344-5a21f7f3724d |
7071
> | [Exchange Administrator](#exchange-administrator) | Can manage all aspects of the Exchange product. | 29232cdf-9323-42fd-ade2-1d097af3e4de |
7172
> | [Exchange Backup Administrator](#exchange-backup-administrator) | Back up and restore content (including granular restore) for Exchange in Microsoft 365 Backup | 49eb8f75-97e9-4e37-9b2b-6c3ebfcffa31 |
7273
> | [Exchange Recipient Administrator](#exchange-recipient-administrator) | Can create or update Exchange Online recipients within the Exchange Online organization. | 31392ffb-586c-42d1-9346-e59415a2cc4e |
⋯ 265 unchanged lines
338339
## Entra Backup Reader
339340
340341
[!INCLUDE [entra-backup-reader](includes/entra-backup-reader.md)]
342
+
343
+## Entra Customer Lockbox Approver
344
+
345
+[!INCLUDE [entra-customer-lockbox-approver](includes/entra-customer-lockbox-approver.md)]
341346
342347
## Exchange Administrator
343348
⋯ 405 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 08:48 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.