Microsoft Entra built-in rolePublic reference
Attribute Assignment Administrator
Assign custom security attribute keys and values to supported Microsoft Entra objects.
Documented resource actions
10 documented actionsThese are Microsoft's documented resource actions, separate from Graph OAuth permissions and tenant assignments. Descriptions are shown as supplied in the reference.
| Action | Description |
|---|---|
| microsoft.directory/attributeSets/allProperties/read | Read all properties of attribute sets |
| microsoft.directory/azureManagedIdentities/customSecurityAttributes/read | Read custom security attribute values for Microsoft Entra managed identities |
| microsoft.directory/azureManagedIdentities/customSecurityAttributes/update | Update custom security attribute values for Microsoft Entra managed identities |
| microsoft.directory/customSecurityAttributeDefinitions/allProperties/read | Read all properties of custom security attribute definitions |
| microsoft.directory/devices/customSecurityAttributes/read | Read custom security attribute values for devices |
| microsoft.directory/devices/customSecurityAttributes/update | Update custom security attribute values for devices |
| microsoft.directory/servicePrincipals/customSecurityAttributes/read | Read custom security attribute values for service principals |
| microsoft.directory/servicePrincipals/customSecurityAttributes/update | Update custom security attribute values for service principals |
| microsoft.directory/users/customSecurityAttributes/read | Read custom security attribute values for users |
| microsoft.directory/users/customSecurityAttributes/update | Update custom security attribute values for users |