Microsoft Entra built-in rolePublic reference
Entra SOC Identity Responder
Perform identity containment actions for SOC incident response, including disabling users, revoking active sign-in sessions, and resetting passwords.
Compare this role or its retained definitions
Explicit references to this role
These items name the role, a previously observed name, or its template GUID. A text reference does not establish impact, an assignment, or equivalent permissions. Connections use the current collected items.
No explicit references found in the collected items available to you.
Microsoft's role reference · Explore the separate Graph OAuth permission catalog. Resource actions do not establish an OAuth-scope mapping.