Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 262/264 feeds/APIs · 418/442 docs · checked 20:00 UTC Customize Public modeDiscuss ChangeIntel on Discord

Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

Identity Governance Administrator

Manage access using Microsoft Entra ID for identity governance scenarios.

Cite this recorded revision

What it said

Permission coverage
Documented resource actions
Action: microsoft.directory/accessReviews/allProperties/allTasks
Create and delete access reviews, and read and update all properties of access reviews in Microsoft Entra ID
Action: microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks
Manage access reviews of application role assignments in Microsoft Entra ID
Action: microsoft.directory/accessReviews/definitions.entitlementManagement/allProperties/allTasks
Manage access reviews for access package assignments in entitlement management
Action: microsoft.directory/accessReviews/definitions.groups/allProperties/read
Read all properties of access reviews for membership in Security and Microsoft 365 groups, including role-assignable groups.
Action: microsoft.directory/accessReviews/definitions.groups/allProperties/update
Update all properties of access reviews for membership in Security and Microsoft 365 groups, excluding role-assignable groups.
Action: microsoft.directory/accessReviews/definitions.groups/create
Create access reviews for membership in Security and Microsoft 365 groups.
Action: microsoft.directory/accessReviews/definitions.groups/delete
Delete access reviews for membership in Security and Microsoft 365 groups.
Action: microsoft.directory/entitlementManagement/allProperties/allTasks
Create and delete resources, and read and update all properties in Microsoft Entra entitlement management
Action: microsoft.directory/groups/members/update
Update members of Security groups and Microsoft 365 groups, excluding role-assignable groups
Action: microsoft.directory/servicePrincipals/appRoleAssignedTo/update
Update service principal role assignments
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 22 Oct 20:00 UTC · 262 of 264 readable · 260 fully read · documentation 418/442 current