Microsoft Entra built-in rolePublic reference

Attribute Assignment Administrator

Assign custom security attribute keys and values to supported Microsoft Entra objects.

Documented resource actions

10 documented actions

These are Microsoft's documented resource actions, separate from Graph OAuth permissions and tenant assignments. Descriptions are shown as supplied in the reference.

Action	Description
microsoft.directory/attributeSets/allProperties/read	Read all properties of attribute sets
microsoft.directory/azureManagedIdentities/customSecurityAttributes/read	Read custom security attribute values for Microsoft Entra managed identities
microsoft.directory/azureManagedIdentities/customSecurityAttributes/update	Update custom security attribute values for Microsoft Entra managed identities
microsoft.directory/customSecurityAttributeDefinitions/allProperties/read	Read all properties of custom security attribute definitions
microsoft.directory/devices/customSecurityAttributes/read	Read custom security attribute values for devices
microsoft.directory/devices/customSecurityAttributes/update	Update custom security attribute values for devices
microsoft.directory/servicePrincipals/customSecurityAttributes/read	Read custom security attribute values for service principals
microsoft.directory/servicePrincipals/customSecurityAttributes/update	Update custom security attribute values for service principals
microsoft.directory/users/customSecurityAttributes/read	Read custom security attribute values for users
microsoft.directory/users/customSecurityAttributes/update	Update custom security attribute values for users