Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Global Secure Access Administrator
Create and manage all aspects of Global Secure Internet Access and Microsoft Global Secure Private Access, including managing access to public and private endpoints.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.azure.supportTickets/allEntities/allTasks
- Create and manage Azure support tickets
- Action: microsoft.directory/applicationPolicies/standard/read
- Read standard properties of application policies
- Action: microsoft.directory/applications/applicationProxy/read
- Read all application proxy properties
- Action: microsoft.directory/applications/owners/read
- Read owners of applications
- Action: microsoft.directory/applications/policies/read
- Read policies of applications
- Action: microsoft.directory/applications/standard/read
- Read standard properties of applications
- Action: microsoft.directory/auditLogs/allProperties/read
- Read all properties on audit logs, excluding custom security attributes audit logs
- Action: microsoft.directory/conditionalAccessPolicies/standard/read
- Read Conditional Access for policies
- Action: microsoft.directory/connectorGroups/allProperties/read
- Read all properties of application proxy connector groups
- Action: microsoft.directory/connectors/allProperties/read
- Read all properties of application proxy connectors
- Action: microsoft.directory/crossTenantAccessPolicy/default/standard/read
- Read basic properties of the default cross-tenant access policy
- Action: microsoft.directory/crossTenantAccessPolicy/partners/standard/read
- Read basic properties of cross-tenant access policy for partners
- Action: microsoft.directory/crossTenantAccessPolicy/standard/read
- Read basic properties of cross-tenant access policy
- Action: microsoft.directory/namedLocations/standard/read
- Read basic properties of custom rules that define network locations
- Action: microsoft.directory/signInReports/allProperties/read
- Read all properties on sign-in reports, including privileged properties
- Action: microsoft.networkAccess/allEntities/allProperties/allTasks
- Manage all aspects of Microsoft Entra Network Access
- Action: microsoft.office365.messageCenter/messages/read
- Read messages in Message Center in the Microsoft 365 admin center, excluding security messages
- Action: microsoft.office365.serviceHealth/allEntities/allTasks
- Read and configure Service Health in the Microsoft 365 admin center
- Action: microsoft.office365.supportTickets/allEntities/allTasks
- Create and manage Microsoft 365 service requests
- Action: microsoft.office365.webPortal/allEntities/standard/read
- Read basic properties on all resources in the Microsoft 365 admin center