Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Identity Governance Administrator
Manage access using Microsoft Entra ID for identity governance scenarios.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.directory/accessReviews/allProperties/allTasks
- Create and delete access reviews, and read and update all properties of access reviews in Microsoft Entra ID
- Action: microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks
- Manage access reviews of application role assignments in Microsoft Entra ID
- Action: microsoft.directory/accessReviews/definitions.entitlementManagement/allProperties/allTasks
- Manage access reviews for access package assignments in entitlement management
- Action: microsoft.directory/accessReviews/definitions.groups/allProperties/read
- Read all properties of access reviews for membership in Security and Microsoft 365 groups, including role-assignable groups.
- Action: microsoft.directory/accessReviews/definitions.groups/allProperties/update
- Update all properties of access reviews for membership in Security and Microsoft 365 groups, excluding role-assignable groups.
- Action: microsoft.directory/accessReviews/definitions.groups/create
- Create access reviews for membership in Security and Microsoft 365 groups.
- Action: microsoft.directory/accessReviews/definitions.groups/delete
- Delete access reviews for membership in Security and Microsoft 365 groups.
- Action: microsoft.directory/entitlementManagement/allProperties/allTasks
- Create and delete resources, and read and update all properties in Microsoft Entra entitlement management
- Action: microsoft.directory/groups/members/update
- Update members of Security groups and Microsoft 365 groups, excluding role-assignable groups
- Action: microsoft.directory/servicePrincipals/appRoleAssignedTo/update
- Update service principal role assignments