Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Authentication Administrator
Can access to view, set and reset authentication method information for any non-admin user.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.azure.serviceHealth/allEntities/allTasks
- Read and configure Azure Service Health
- Action: microsoft.azure.supportTickets/allEntities/allTasks
- Create and manage Azure support tickets
- Action: microsoft.directory/deletedItems.users/restore
- Restore soft deleted users to original state
- Action: microsoft.directory/users/authenticationMethods/basic/update
- Update basic properties of authentication methods for users
- Action: microsoft.directory/users/authenticationMethods/create
- Update authentication methods for users
- Action: microsoft.directory/users/authenticationMethods/delete
- Delete authentication methods for users
- Action: microsoft.directory/users/authenticationMethods/standard/restrictedRead
- Read standard properties of authentication methods that do not include personally identifiable information for users
- Action: microsoft.directory/users/basic/update
- Update basic properties on users
- Action: microsoft.directory/users/delete
- Delete users
- Action: microsoft.directory/users/disable
- Disable users
- Action: microsoft.directory/users/enable
- Enable users
- Action: microsoft.directory/users/invalidateAllRefreshTokens
- Force sign-out by invalidating user refresh tokens
- Action: microsoft.directory/users/manager/update
- Update manager for users
- Action: microsoft.directory/users/password/update
- Reset passwords for all users
- Action: microsoft.directory/users/restore
- Restore deleted users
- Action: microsoft.directory/users/userPrincipalName/update
- Update User Principal Name of users
- Action: microsoft.office365.serviceHealth/allEntities/allTasks
- Read and configure Service Health in the Microsoft 365 admin center
- Action: microsoft.office365.supportTickets/allEntities/allTasks
- Create and manage Microsoft 365 service requests
- Action: microsoft.office365.webPortal/allEntities/standard/read
- Read basic properties on all resources in the Microsoft 365 admin center