Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Privileged Authentication Administrator
Can access to view, set and reset authentication method information for any user (admin or non-admin).
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.azure.serviceHealth/allEntities/allTasks
- Read and configure Azure Service Health
- Action: microsoft.azure.supportTickets/allEntities/allTasks
- Create and manage Azure support tickets
- Action: microsoft.directory/deletedItems.users/restore
- Restore soft deleted users to original state
- Action: microsoft.directory/users/authenticationMethods/basic/update
- Update basic properties of authentication methods for users
- Action: microsoft.directory/users/authenticationMethods/create
- Update authentication methods for users
- Action: microsoft.directory/users/authenticationMethods/delete
- Delete authentication methods for users
- Action: microsoft.directory/users/authenticationMethods/standard/read
- Read standard properties of authentication methods for users
- Action: microsoft.directory/users/authorizationInfo/update
- Update the multivalued Certificate user IDs property of users
- Action: microsoft.directory/users/basic/update
- Update basic properties on users
- Action: microsoft.directory/users/delete
- Delete users
- Action: microsoft.directory/users/disable
- Disable users
- Action: microsoft.directory/users/enable
- Enable users
- Action: microsoft.directory/users/invalidateAllRefreshTokens
- Force sign-out by invalidating user refresh tokens
- Action: microsoft.directory/users/manager/update
- Update manager for users
- Action: microsoft.directory/users/password/update
- Reset passwords for all users
- Action: microsoft.directory/users/restore
- Restore deleted users
- Action: microsoft.directory/users/userPrincipalName/update
- Update User Principal Name of users
- Action: microsoft.office365.serviceHealth/allEntities/allTasks
- Read and configure Service Health in the Microsoft 365 admin center
- Action: microsoft.office365.supportTickets/allEntities/allTasks
- Create and manage Microsoft 365 service requests
- Action: microsoft.office365.webPortal/allEntities/standard/read
- Read basic properties on all resources in the Microsoft 365 admin center