Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
AI Reader
Read all aspects of Microsoft Copilot and AI-related enterprise services in Microsoft 365.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.azure.serviceHealth/allEntities/allTasks
- Read and configure Azure Service Health
- Action: microsoft.directory/adminConsentRequestPolicy/allProperties/read
- Read all properties of admin consent request policies in Microsoft Entra ID
- Action: microsoft.directory/administrativeUnits/members/read
- Read members of administrative units
- Action: microsoft.directory/administrativeUnits/standard/read
- Read basic properties on administrative units
- Action: microsoft.directory/agentIdentities/allProperties/read
- Read all properties of agent identities
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/allProperties/read
- Read all properties of agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprints/allProperties/read
- Read all properties of agent identity blueprints
- Action: microsoft.directory/agentUsers/lifeCycleInfo/read
- Read lifecycle information of agent users, such as employeeLeaveDateTime
- Action: microsoft.directory/applicationPolicies/standard/read
- Read standard properties of application policies
- Action: microsoft.directory/applications/owners/read
- Read owners of applications
- Action: microsoft.directory/applications/policies/read
- Read policies of applications
- Action: microsoft.directory/applications/standard/read
- Read standard properties of applications
- Action: microsoft.directory/contacts/memberOf/read
- Read the group membership for all contacts in Microsoft Entra ID
- Action: microsoft.directory/contacts/standard/read
- Read basic properties on contacts in Microsoft Entra ID
- Action: microsoft.directory/contracts/standard/read
- Read basic properties on partner contracts
- Action: microsoft.directory/domains/standard/read
- Read basic properties on domains
- Action: microsoft.directory/entitlementManagement/allProperties/read
- Read all properties in Microsoft Entra entitlement management
- Action: microsoft.directory/groupSettingTemplates/standard/read
- Read basic properties on group setting templates
- Action: microsoft.directory/groupSettings/standard/read
- Read basic properties on group settings
- Action: microsoft.directory/groups/appRoleAssignments/read
- Read application role assignments of groups
- Action: microsoft.directory/groups/memberOf/read
- Read the memberOf property on Security groups and Microsoft 365 groups, including role-assignable groups
- Action: microsoft.directory/groups/members/read
- Read members of Security groups and Microsoft 365 groups, including role-assignable groups
- Action: microsoft.directory/groups/owners/read
- Read owners of Security groups and Microsoft 365 groups, including role-assignable groups
- Action: microsoft.directory/groups/settings/read
- Read settings of groups
- Action: microsoft.directory/groups/standard/read
- Read standard properties of Security groups and Microsoft 365 groups, including role-assignable groups
- Action: microsoft.directory/oAuth2PermissionGrants/standard/read
- Read basic properties on OAuth 2.0 permission grants
- Action: microsoft.directory/organization/standard/read
- Read basic properties on an organization
- Action: microsoft.directory/organization/trustedCAsForPasswordlessAuth/read
- Read trusted certificate authorities for passwordless authentication
- Action: microsoft.directory/roleAssignments/standard/read
- Read basic properties on role assignments
- Action: microsoft.directory/roleDefinitions/standard/read
- Read basic properties on role definitions
- Action: microsoft.directory/servicePrincipals/appRoleAssignedTo/read
- Read service principal role assignments
- Action: microsoft.directory/servicePrincipals/appRoleAssignments/read
- Read role assignments assigned to service principals
- Action: microsoft.directory/servicePrincipals/memberOf/read
- Read the group memberships on service principals
- Action: microsoft.directory/servicePrincipals/oAuth2PermissionGrants/read
- Read delegated permission grants on service principals
- Action: microsoft.directory/servicePrincipals/ownedObjects/read
- Read owned objects of service principals
- Action: microsoft.directory/servicePrincipals/owners/read
- Read owners of service principals
- Action: microsoft.directory/servicePrincipals/policies/read
- Read policies of service principals
- Action: microsoft.directory/servicePrincipals/standard/read
- Read basic properties of service principals
- Action: microsoft.directory/subscribedSkus/standard/read
- Read basic properties on subscriptions
- Action: microsoft.directory/users/allProperties/read
- Read all properties of users
- Action: microsoft.office365.copilot/allEntities/allProperties/read
- Read all settings for Microsoft Copilot
- Action: microsoft.office365.messageCenter/messages/read
- Read messages in Message Center in the Microsoft 365 admin center, excluding security messages
- Action: microsoft.office365.network/performance/allProperties/read
- Read all network performance properties in the Microsoft 365 admin center
- Action: microsoft.office365.serviceHealth/allEntities/allTasks
- Read and configure Service Health in the Microsoft 365 admin center
- Action: microsoft.office365.webPortal/allEntities/standard/read
- Read basic properties on all resources in the Microsoft 365 admin center