Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 262/264 feeds/APIs · 418/442 docs · checked 20:00 UTC Customize Public modeDiscuss ChangeIntel on Discord

Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

Helpdesk Administrator

Can reset passwords for non-administrators and Helpdesk Administrators.

Cite this recorded revision

What it said

Permission coverage
Documented resource actions
Action: microsoft.azure.serviceHealth/allEntities/allTasks
Read and configure Azure Service Health
Action: microsoft.azure.supportTickets/allEntities/allTasks
Create and manage Azure support tickets
Action: microsoft.directory/bitlockerKeys/key/read
Read bitlocker metadata and key on devices
Action: microsoft.directory/deviceLocalCredentials/standard/read
Read all properties of the backed up local administrator account credentials for Microsoft Entra joined devices, except the password
Action: microsoft.directory/users/invalidateAllRefreshTokens
Force sign-out by invalidating user refresh tokens
Action: microsoft.directory/users/password/update
Reset passwords for all users
Action: microsoft.office365.serviceHealth/allEntities/allTasks
Read and configure Service Health in the Microsoft 365 admin center
Action: microsoft.office365.supportTickets/allEntities/allTasks
Create and manage Microsoft 365 service requests
Action: microsoft.office365.webPortal/allEntities/standard/read
Read basic properties on all resources in the Microsoft 365 admin center
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 22 Oct 20:00 UTC · 262 of 264 readable · 260 fully read · documentation 418/442 current