Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 262/264 feeds/APIs · 418/442 docs · checked 20:00 UTC Customize Public modeDiscuss ChangeIntel on Discord

Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

Conditional Access Administrator

Can manage Conditional Access capabilities.

Cite this recorded revision

What it said

Permission coverage
Documented resource actions
Action: microsoft.directory/conditionalAccessPolicies/basic/update
Update basic properties for Conditional Access policies
Action: microsoft.directory/conditionalAccessPolicies/create
Create Conditional Access policies
Action: microsoft.directory/conditionalAccessPolicies/delete
Delete Conditional Access policies
Action: microsoft.directory/conditionalAccessPolicies/owners/read
Read the owners of Conditional Access policies
Action: microsoft.directory/conditionalAccessPolicies/owners/update
Update owners for Conditional Access policies
Action: microsoft.directory/conditionalAccessPolicies/policyAppliedTo/read
Read the "applied to" property for Conditional Access policies
Action: microsoft.directory/conditionalAccessPolicies/standard/read
Read Conditional Access for policies
Action: microsoft.directory/conditionalAccessPolicies/tenantDefault/update
Update the default tenant for Conditional Access policies
Action: microsoft.directory/namedLocations/basic/update
Update basic properties of custom rules that define network locations
Action: microsoft.directory/namedLocations/create
Create custom rules that define network locations
Action: microsoft.directory/namedLocations/delete
Delete custom rules that define network locations
Action: microsoft.directory/namedLocations/standard/read
Read basic properties of custom rules that define network locations
Action: microsoft.directory/resourceNamespaces/resourceActions/authenticationContext/update
Update Conditional Access authentication context of Microsoft 365 role-based access control (RBAC) resource actions
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 22 Oct 20:00 UTC · 262 of 264 readable · 260 fully read · documentation 418/442 current