Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Hybrid Identity Administrator
Manage Active Directory to Microsoft Entra cloud provisioning, Microsoft Entra Connect, pass-through authentication (PTA), password hash synchronization (PHS), seamless single sign-on (seamless SSO), and federation settings. Does not have access to manage Microsoft Entra Connect Health.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.azure.serviceHealth/allEntities/allTasks
- Read and configure Azure Service Health
- Action: microsoft.azure.supportTickets/allEntities/allTasks
- Create and manage Azure support tickets
- Action: microsoft.directory/applicationTemplates/instantiate
- Instantiate gallery applications from application templates
- Action: microsoft.directory/applications/appRoles/update
- Update the appRoles property on all types of applications
- Action: microsoft.directory/applications/audience/update
- Update the audience property for applications
- Action: microsoft.directory/applications/authentication/update
- Update authentication on all types of applications
- Action: microsoft.directory/applications/basic/update
- Update basic properties for applications
- Action: microsoft.directory/applications/create
- Create all types of applications
- Action: microsoft.directory/applications/delete
- Delete all types of applications
- Action: microsoft.directory/applications/disablement/update
- Update whether an application is enabled for users to sign in
- Action: microsoft.directory/applications/notes/update
- Update notes of applications
- Action: microsoft.directory/applications/owners/update
- Update owners of applications
- Action: microsoft.directory/applications/permissions/update
- Update exposed permissions and required permissions on all types of applications
- Action: microsoft.directory/applications/policies/update
- Update policies of applications
- Action: microsoft.directory/applications/synchronization/standard/read
- Read provisioning settings associated with the application object
- Action: microsoft.directory/applications/tag/update
- Update tags of applications
- Action: microsoft.directory/auditLogs/allProperties/read
- Read all properties on audit logs, excluding custom security attributes audit logs
- Action: microsoft.directory/cloudProvisioning/allProperties/allTasks
- Read and configure all properties of Microsoft Entra cloud provisioning service.
- Action: microsoft.directory/deletedItems.applications/delete
- Permanently delete applications, which can no longer be restored
- Action: microsoft.directory/deletedItems.applications/restore
- Restore soft deleted applications to original state
- Action: microsoft.directory/domains/allProperties/read
- Read all properties of domains
- Action: microsoft.directory/domains/federation/update
- Update federation property of domains
- Action: microsoft.directory/domains/federationConfiguration/basic/update
- Update basic federation configuration for domains
- Action: microsoft.directory/domains/federationConfiguration/create
- Create federation configuration for domains
- Action: microsoft.directory/domains/federationConfiguration/delete
- Delete federation configuration for domains
- Action: microsoft.directory/domains/federationConfiguration/standard/read
- Read standard properties of federation configuration for domains
- Action: microsoft.directory/hybridAuthenticationPolicy/allProperties/allTasks
- Manage hybrid authentication policy in Microsoft Entra ID
- Action: microsoft.directory/onPremisesSynchronization/basic/update
- Update basic on-premises directory synchronization information
- Action: microsoft.directory/onPremisesSynchronization/standard/read
- Read standard on-premises directory synchronization information
- Action: microsoft.directory/organization/dirSync/update
- Update the organization directory sync property
- Action: microsoft.directory/passwordHashSync/allProperties/allTasks
- Manage all aspects of Password Hash Synchronization (PHS) in Microsoft Entra ID
- Action: microsoft.directory/provisioningLogs/allProperties/read
- Read all properties of provisioning logs
- Action: microsoft.directory/servicePrincipals/appRoleAssignedTo/update
- Update service principal role assignments
- Action: microsoft.directory/servicePrincipals/audience/update
- Update audience properties on service principals
- Action: microsoft.directory/servicePrincipals/authentication/update
- Update authentication properties on service principals
- Action: microsoft.directory/servicePrincipals/basic/update
- Update basic properties on service principals
- Action: microsoft.directory/servicePrincipals/create
- Create service principals
- Action: microsoft.directory/servicePrincipals/delete
- Delete service principals
- Action: microsoft.directory/servicePrincipals/disable
- Disable service principals
- Action: microsoft.directory/servicePrincipals/enable
- Enable service principals
- Action: microsoft.directory/servicePrincipals/notes/update
- Update notes of service principals
- Action: microsoft.directory/servicePrincipals/owners/update
- Update owners of service principals
- Action: microsoft.directory/servicePrincipals/permissions/update
- Update permissions of service principals
- Action: microsoft.directory/servicePrincipals/policies/update
- Update policies of service principals
- Action: microsoft.directory/servicePrincipals/synchronization.cloudTenantToCloudTenant/credentials/manage
- Manage cloud tenant to cloud tenant application provisioning secrets and credentials.
- Action: microsoft.directory/servicePrincipals/synchronization.cloudTenantToCloudTenant/jobs/manage
- Start, restart, and pause cloud tenant to cloud tenant application provisioning synchronization jobs.
- Action: microsoft.directory/servicePrincipals/synchronization.cloudTenantToCloudTenant/schema/manage
- Create and manage cloud tenant to cloud tenant application provisioning synchronization jobs and schema.
- Action: microsoft.directory/servicePrincipals/synchronization.cloudTenantToExternalSystem/credentials/manage
- Manage application provisioning secrets and credentials.
- Action: microsoft.directory/servicePrincipals/synchronization.cloudTenantToExternalSystem/jobs/manage
- Start, restart, and pause application provisioning synchronization jobs.
- Action: microsoft.directory/servicePrincipals/synchronization.cloudTenantToExternalSystem/schema/manage
- Create and manage application provisioning synchronization jobs and schema.
- Action: microsoft.directory/servicePrincipals/synchronization/standard/read
- Read provisioning settings associated with your service principal
- Action: microsoft.directory/servicePrincipals/synchronizationCredentials/manage
- Manage application provisioning secrets and credentials
- Action: microsoft.directory/servicePrincipals/synchronizationJobs/manage
- Start, restart, and pause application provisioning synchronization jobs
- Action: microsoft.directory/servicePrincipals/synchronizationSchema/manage
- Create and manage application provisioning synchronization jobs and schema
- Action: microsoft.directory/servicePrincipals/tag/update
- Update the tag property for service principals
- Action: microsoft.directory/signInReports/allProperties/read
- Read all properties on sign-in reports, including privileged properties
- Action: microsoft.directory/users/authorizationInfo/update
- Update the multivalued Certificate user IDs property of users
- Action: microsoft.office365.messageCenter/messages/read
- Read messages in Message Center in the Microsoft 365 admin center, excluding security messages
- Action: microsoft.office365.serviceHealth/allEntities/allTasks
- Read and configure Service Health in the Microsoft 365 admin center
- Action: microsoft.office365.supportTickets/allEntities/allTasks
- Create and manage Microsoft 365 service requests
- Action: microsoft.office365.webPortal/allEntities/standard/read
- Read basic properties on all resources in the Microsoft 365 admin center