Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Teams Administrator
Can manage the Microsoft Teams service.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.azure.serviceHealth/allEntities/allTasks
- Read and configure Azure Service Health
- Action: microsoft.azure.supportTickets/allEntities/allTasks
- Create and manage Azure support tickets
- Action: microsoft.directory/authorizationPolicy/standard/read
- Read standard properties of authorization policy
- Action: microsoft.directory/crossTenantAccessPolicy/allowedCloudEndpoints/update
- Update allowed cloud endpoints of cross-tenant access policy
- Action: microsoft.directory/crossTenantAccessPolicy/default/crossCloudMeetings/update
- Update cross-cloud Teams meeting settings of the default cross-tenant access policy
- Action: microsoft.directory/crossTenantAccessPolicy/default/standard/read
- Read basic properties of the default cross-tenant access policy
- Action: microsoft.directory/crossTenantAccessPolicy/partners/create
- Create cross-tenant access policy for partners
- Action: microsoft.directory/crossTenantAccessPolicy/partners/crossCloudMeetings/update
- Update cross-cloud Teams meeting settings of cross-tenant access policy for partners
- Action: microsoft.directory/crossTenantAccessPolicy/partners/standard/read
- Read basic properties of cross-tenant access policy for partners
- Action: microsoft.directory/crossTenantAccessPolicy/standard/read
- Read basic properties of cross-tenant access policy
- Action: microsoft.directory/externalUserProfiles/basic/update
- Update basic properties of external user profiles in the extended directory for Teams
- Action: microsoft.directory/externalUserProfiles/delete
- Delete external user profiles in the extended directory for Teams
- Action: microsoft.directory/externalUserProfiles/standard/read
- Read standard properties of external user profiles in the extended directory for Teams
- Action: microsoft.directory/groups.unified/assignedLabels/update
- Update the assigned labels property on Microsoft 365 groups of assigned membership type, excluding role-assignable groups
- Action: microsoft.directory/groups.unified/basic/update
- Update basic properties on Microsoft 365 groups, excluding role-assignable groups
- Action: microsoft.directory/groups.unified/create
- Create Microsoft 365 groups, excluding role-assignable groups
- Action: microsoft.directory/groups.unified/delete
- Delete Microsoft 365 groups, excluding role-assignable groups
- Action: microsoft.directory/groups.unified/members/update
- Update members of Microsoft 365 groups, excluding role-assignable groups
- Action: microsoft.directory/groups.unified/owners/update
- Update owners of Microsoft 365 groups, excluding role-assignable groups
- Action: microsoft.directory/groups.unified/restore
- Restore Microsoft 365 groups from soft-deleted container, excluding role-assignable groups
- Action: microsoft.directory/groups/hiddenMembers/read
- Read hidden members of Security groups and Microsoft 365 groups, including role-assignable groups
- Action: microsoft.directory/pendingExternalUserProfiles/basic/update
- Update basic properties of external user profiles in the extended directory for Teams
- Action: microsoft.directory/pendingExternalUserProfiles/create
- Create external user profiles in the extended directory for Teams
- Action: microsoft.directory/pendingExternalUserProfiles/delete
- Delete external user profiles in the extended directory for Teams
- Action: microsoft.directory/pendingExternalUserProfiles/standard/read
- Read standard properties of external user profiles in the extended directory for Teams
- Action: microsoft.directory/permissionGrantPolicies/standard/read
- Read standard properties of permission grant policies
- Action: microsoft.office365.network/performance/allProperties/read
- Read all network performance properties in the Microsoft 365 admin center
- Action: microsoft.office365.serviceHealth/allEntities/allTasks
- Read and configure Service Health in the Microsoft 365 admin center
- Action: microsoft.office365.skypeForBusiness/allEntities/allTasks
- Manage all aspects of Skype for Business Online
- Action: microsoft.office365.supportTickets/allEntities/allTasks
- Create and manage Microsoft 365 service requests
- Action: microsoft.office365.usageReports/allEntities/allProperties/read
- Read Office 365 usage reports
- Action: microsoft.office365.webPortal/allEntities/standard/read
- Read basic properties on all resources in the Microsoft 365 admin center
- Action: microsoft.teams/allEntities/allProperties/allTasks
- Manage all resources in Teams