Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 262/264 feeds/APIs · 418/442 docs · checked 20:00 UTC Customize Public modeDiscuss ChangeIntel on Discord

Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

Cloud Device Administrator

Limited access to manage devices in Microsoft Entra ID.

Cite this recorded revision

What it said

Permission coverage
Documented resource actions
Action: microsoft.azure.serviceHealth/allEntities/allTasks
Read and configure Azure Service Health
Action: microsoft.directory/auditLogs/allProperties/read
Read all properties on audit logs, excluding custom security attributes audit logs
Action: microsoft.directory/authorizationPolicy/standard/read
Read standard properties of authorization policy
Action: microsoft.directory/bitlockerKeys/key/read
Read bitlocker metadata and key on devices
Action: microsoft.directory/deletedItems.devices/delete
Permanently delete devices, which can no longer be restored
Action: microsoft.directory/deletedItems.devices/restore
Restore soft deleted devices to original state
Action: microsoft.directory/deviceLocalCredentials/password/read
Read all properties of the backed up local administrator account credentials for Microsoft Entra joined devices, including the password
Action: microsoft.directory/deviceManagementPolicies/basic/update
Update basic properties on mobile device management and mobile app management policies
Action: microsoft.directory/deviceManagementPolicies/standard/read
Read standard properties on mobile device management and mobile app management policies
Action: microsoft.directory/deviceRegistrationPolicy/basic/update
Update basic properties on device registration policies
Action: microsoft.directory/deviceRegistrationPolicy/standard/read
Read standard properties on device registration policies
Action: microsoft.directory/deviceTemplates/owners/read
Read owners on Internet of Things (IoT) device templates
Action: microsoft.directory/deviceTemplates/owners/update
Update owners on Internet of Things (IoT) device templates
Action: microsoft.directory/devices/delete
Delete devices from Microsoft Entra ID
Action: microsoft.directory/devices/disable
Disable devices in Microsoft Entra ID
Action: microsoft.directory/devices/enable
Enable devices in Microsoft Entra ID
Action: microsoft.directory/devices/permissions/update
Update the alternative name property on an IoT device
Action: microsoft.directory/signInReports/allProperties/read
Read all properties on sign-in reports, including privileged properties
Action: microsoft.office365.serviceHealth/allEntities/allTasks
Read and configure Service Health in the Microsoft 365 admin center
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 22 Oct 20:00 UTC · 262 of 264 readable · 260 fully read · documentation 418/442 current