Microsoft Entra built-in rolePublic reference
Guest Inviter
Can invite guest users independent of the 'members can invite guests' setting.
Documented resource actions
17 documented actionsThese are Microsoft's documented resource actions, separate from Graph OAuth permissions and tenant assignments. Descriptions are shown as supplied in the reference.
| Action | Description |
|---|---|
| microsoft.directory/users/appRoleAssignments/read | Read application role assignments for users |
| microsoft.directory/users/deviceForResourceAccount/read | Read deviceForResourceAccount of users |
| microsoft.directory/users/directReports/read | Read the direct reports for users |
| microsoft.directory/users/inviteGuest | Invite guest users |
| microsoft.directory/users/invitedBy/read | Read the user that invited an external user to a tenant |
| microsoft.directory/users/licenseDetails/read | Read license details of users |
| microsoft.directory/users/manager/read | Read manager of users |
| microsoft.directory/users/memberOf/read | Read the group memberships of users |
| microsoft.directory/users/oAuth2PermissionGrants/read | Read delegated permission grants on users |
| microsoft.directory/users/ownedDevices/read | Read owned devices of users |
| microsoft.directory/users/ownedObjects/read | Read owned objects of users |
| microsoft.directory/users/photo/read | Read photo of users |
| microsoft.directory/users/registeredDevices/read | Read registered devices of users |
| microsoft.directory/users/scopedRoleMemberOf/read | Read user's membership of a Microsoft Entra role, that is scoped to an administrative unit |
| microsoft.directory/users/sponsorOf/read | Read all the agents or applications the user is sponsor of |
| microsoft.directory/users/sponsors/read | Read sponsors of users |
| microsoft.directory/users/standard/read | Read basic properties on users |