Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Knowledge Administrator
Can configure knowledge, learning, and other intelligent features.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.directory/groups.security/basic/update
- Update basic properties on Security groups, excluding role-assignable groups
- Action: microsoft.directory/groups.security/create
- Create Security groups, excluding role-assignable groups
- Action: microsoft.directory/groups.security/createAsOwner
- Create Security groups, excluding role-assignable groups. Creator is added as the first owner.
- Action: microsoft.directory/groups.security/delete
- Delete Security groups, excluding role-assignable groups
- Action: microsoft.directory/groups.security/members/update
- Update members of Security groups, excluding role-assignable groups
- Action: microsoft.directory/groups.security/owners/update
- Update owners of Security groups, excluding role-assignable groups
- Action: microsoft.office365.knowledge/contentUnderstanding/allProperties/allTasks
- Read and update all properties of content understanding in Microsoft 365 admin center
- Action: microsoft.office365.knowledge/knowledgeNetwork/allProperties/allTasks
- Read and update all properties of knowledge network in Microsoft 365 admin center
- Action: microsoft.office365.knowledge/learningSources/allProperties/allTasks
- Manage learning sources and all their properties in Learning App.
- Action: microsoft.office365.protectionCenter/sensitivityLabels/allProperties/read
- Read all properties of sensitivity labels in the Security and Compliance centers
- Action: microsoft.office365.sharePoint/allEntities/allTasks
- Create and delete all resources, and read and update standard properties in SharePoint
- Action: microsoft.office365.supportTickets/allEntities/allTasks
- Create and manage Microsoft 365 service requests
- Action: microsoft.office365.webPortal/allEntities/standard/read
- Read basic properties on all resources in the Microsoft 365 admin center