Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Conditional Access Administrator
Can manage Conditional Access capabilities.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.directory/conditionalAccessPolicies/basic/update
- Update basic properties for Conditional Access policies
- Action: microsoft.directory/conditionalAccessPolicies/create
- Create Conditional Access policies
- Action: microsoft.directory/conditionalAccessPolicies/delete
- Delete Conditional Access policies
- Action: microsoft.directory/conditionalAccessPolicies/owners/read
- Read the owners of Conditional Access policies
- Action: microsoft.directory/conditionalAccessPolicies/owners/update
- Update owners for Conditional Access policies
- Action: microsoft.directory/conditionalAccessPolicies/policyAppliedTo/read
- Read the "applied to" property for Conditional Access policies
- Action: microsoft.directory/conditionalAccessPolicies/standard/read
- Read Conditional Access for policies
- Action: microsoft.directory/conditionalAccessPolicies/tenantDefault/update
- Update the default tenant for Conditional Access policies
- Action: microsoft.directory/namedLocations/basic/update
- Update basic properties of custom rules that define network locations
- Action: microsoft.directory/namedLocations/create
- Create custom rules that define network locations
- Action: microsoft.directory/namedLocations/delete
- Delete custom rules that define network locations
- Action: microsoft.directory/namedLocations/standard/read
- Read basic properties of custom rules that define network locations
- Action: microsoft.directory/resourceNamespaces/resourceActions/authenticationContext/update
- Update Conditional Access authentication context of Microsoft 365 role-based access control (RBAC) resource actions