Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Cloud Device Administrator
Limited access to manage devices in Microsoft Entra ID.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.azure.serviceHealth/allEntities/allTasks
- Read and configure Azure Service Health
- Action: microsoft.directory/auditLogs/allProperties/read
- Read all properties on audit logs, excluding custom security attributes audit logs
- Action: microsoft.directory/authorizationPolicy/standard/read
- Read standard properties of authorization policy
- Action: microsoft.directory/bitlockerKeys/key/read
- Read bitlocker metadata and key on devices
- Action: microsoft.directory/deletedItems.devices/delete
- Permanently delete devices, which can no longer be restored
- Action: microsoft.directory/deletedItems.devices/restore
- Restore soft deleted devices to original state
- Action: microsoft.directory/deviceLocalCredentials/password/read
- Read all properties of the backed up local administrator account credentials for Microsoft Entra joined devices, including the password
- Action: microsoft.directory/deviceManagementPolicies/basic/update
- Update basic properties on mobile device management and mobile app management policies
- Action: microsoft.directory/deviceManagementPolicies/standard/read
- Read standard properties on mobile device management and mobile app management policies
- Action: microsoft.directory/deviceRegistrationPolicy/basic/update
- Update basic properties on device registration policies
- Action: microsoft.directory/deviceRegistrationPolicy/standard/read
- Read standard properties on device registration policies
- Action: microsoft.directory/deviceTemplates/owners/read
- Read owners on Internet of Things (IoT) device templates
- Action: microsoft.directory/deviceTemplates/owners/update
- Update owners on Internet of Things (IoT) device templates
- Action: microsoft.directory/devices/delete
- Delete devices from Microsoft Entra ID
- Action: microsoft.directory/devices/disable
- Disable devices in Microsoft Entra ID
- Action: microsoft.directory/devices/enable
- Enable devices in Microsoft Entra ID
- Action: microsoft.directory/devices/permissions/update
- Update the alternative name property on an IoT device
- Action: microsoft.directory/signInReports/allProperties/read
- Read all properties on sign-in reports, including privileged properties
- Action: microsoft.office365.serviceHealth/allEntities/allTasks
- Read and configure Service Health in the Microsoft 365 admin center