Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 23:08 UTC Customize Public modeDiscuss ChangeIntel on Discord

Recorded 25 Oct 2026 at 17:12 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

Cloud Device Administrator

Limited access to manage devices in Microsoft Entra ID.

Cite this recorded revision

What it said

Permission coverage
Documented resource actions
Action: microsoft.azure.serviceHealth/allEntities/allTasks
Read and configure Azure Service Health
Action: microsoft.directory/auditLogs/allProperties/read
Read all properties on audit logs, excluding custom security attributes audit logs
Action: microsoft.directory/authorizationPolicy/standard/read
Read standard properties of authorization policy
Action: microsoft.directory/bitlockerKeys/key/read
Read bitlocker metadata and key on devices
Action: microsoft.directory/deletedItems.devices/delete
Permanently delete devices, which can no longer be restored
Action: microsoft.directory/deletedItems.devices/restore
Restore soft deleted devices to original state
Action: microsoft.directory/deviceLocalCredentials/password/read
Read all properties of the backed up local administrator account credentials for Microsoft Entra joined devices, including the password
Action: microsoft.directory/deviceManagementPolicies/basic/update
Update basic properties on mobile device management and mobile app management policies
Action: microsoft.directory/deviceManagementPolicies/standard/read
Read standard properties on mobile device management and mobile app management policies
Action: microsoft.directory/deviceRegistrationPolicy/basic/update
Update basic properties on device registration policies
Action: microsoft.directory/deviceRegistrationPolicy/standard/read
Read standard properties on device registration policies
Action: microsoft.directory/deviceTemplates/owners/read
Read owners on Internet of Things (IoT) device templates
Action: microsoft.directory/deviceTemplates/owners/update
Update owners on Internet of Things (IoT) device templates
Action: microsoft.directory/devices/delete
Delete devices from Microsoft Entra ID
Action: microsoft.directory/devices/disable
Disable devices in Microsoft Entra ID
Action: microsoft.directory/devices/enable
Enable devices in Microsoft Entra ID
Action: microsoft.directory/devices/permissions/update
Update the alternative name property on an IoT device
Action: microsoft.directory/signInReports/allProperties/read
Read all properties on sign-in reports, including privileged properties
Action: microsoft.office365.serviceHealth/allEntities/allTasks
Read and configure Service Health in the Microsoft 365 admin center
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 23:08 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current