Entra built-in roles and permissions
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit bf45f8c · +2 −2 lines · also on GitHub
⋯ 25 unchanged lines
2626
> | [Agent ID Administrator](#agent-id-administrator) | Manage all aspects of agents in a tenant including identity lifecycle operations for agent blueprints, agent identity blueprint principals, agent identities, and agentic users.<br/>[](privileged-roles-permissions.md) | db506228-d27e-4b7d-95e5-295956d6615f |
2727
> | [Agent ID Developer](#agent-id-developer) | Create an agent identity blueprint and its agent identity blueprint principal in a tenant. User will be added as an owner of the created agent identity blueprint and its agent identity blueprint principal. | adb2368d-a9be-41b5-8667-d96778e081b0 |
2828
> | [Agent Registry Administrator](#agent-registry-administrator) | Manage all aspects of the Agent Registry service in Microsoft Entra ID | 6b942400-691f-4bf0-9d12-d8a254a2baf5 |
29
−> | [AI Administrator](#ai-administrator) | Manage all aspects of Microsoft 365 Copilot and AI-related enterprise services in Microsoft 365.<br/>[](privileged-roles-permissions.md) | d2562ede-74db-457e-a7b6-544e236ebb61 |
30
−> | [AI Reader](#ai-reader) | Read all aspects of Microsoft 365 Copilot and AI-related enterprise services in Microsoft 365.<br/>[](privileged-roles-permissions.md) | 1fe13547-53f6-408d-ac04-7f8eed167b38 |
29
+> | [AI Administrator](#ai-administrator) | Manage all aspects of Microsoft Copilot and AI-related enterprise services in Microsoft 365.<br/>[](privileged-roles-permissions.md) | d2562ede-74db-457e-a7b6-544e236ebb61 |
30
+> | [AI Reader](#ai-reader) | Read all aspects of Microsoft Copilot and AI-related enterprise services in Microsoft 365.<br/>[](privileged-roles-permissions.md) | 1fe13547-53f6-408d-ac04-7f8eed167b38 |
3131
> | [Application Administrator](#application-administrator) | Can create and manage all aspects of app registrations and enterprise apps.<br/>[](privileged-roles-permissions.md) | 9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3 |
3232
> | [Application Developer](#application-developer) | Can create application registrations independent of the 'Users can register applications' setting.<br/>[](privileged-roles-permissions.md) | cf1c38e5-3621-4004-a7cb-879624dced7c |
3333
> | [Attack Payload Author](#attack-payload-author) | Can create attack payloads that an administrator can initiate later. | 9c6df0f2-1e7c-4dc3-b195-66dfbd24aa8f |
⋯ 721 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 08:48 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.