Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
AI Administrator
Manage all aspects of Microsoft Copilot and AI-related enterprise services in Microsoft 365.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.azure.serviceHealth/allEntities/allTasks
- Read and configure Azure Service Health
- Action: microsoft.azure.supportTickets/allEntities/allTasks
- Create and manage Azure support tickets
- Action: microsoft.directory/adminConsentRequestPolicy/allProperties/allTasks
- Manage admin consent request policies in Microsoft Entra ID
- Action: microsoft.directory/agentIdentities/allProperties/read
- Read all properties of agent identities
- Action: microsoft.directory/agentIdentities/appRoleAssignedTo/update
- Update agent identity role assignments
- Action: microsoft.directory/agentIdentities/authentication/update
- Update authentication on agent identities
- Action: microsoft.directory/agentIdentities/basic/update
- Update basic properties on agent identities
- Action: microsoft.directory/agentIdentities/create
- Create agent identities
- Action: microsoft.directory/agentIdentities/delete
- Delete agent identities
- Action: microsoft.directory/agentIdentities/disable
- Disable agent identities
- Action: microsoft.directory/agentIdentities/enable
- Enable agent identities
- Action: microsoft.directory/agentIdentities/owners/update
- Update owners on agent identities
- Action: microsoft.directory/agentIdentities/tag/update
- Update tags of agent identities
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/allProperties/read
- Read all properties of agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/appRoleAssignedTo/update
- Update agent identity blueprint principal role assignments
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/authentication/update
- Update authentication on agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/basic/update
- Update basic properties on agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/create
- Create agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/delete
- Delete agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/disable
- Disable agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/enable
- Enable agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/owners/update
- Update owners on agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprintPrincipals/tag/update
- Update tags of agent identity blueprint principals
- Action: microsoft.directory/agentIdentityBlueprints/allProperties/read
- Read all properties of agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/allProperties/update
- Update all properties of agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/appRoles/update
- Update appRoles on agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/audience/update
- Update audience on agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/authentication/update
- Update authentication on agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/basic/update
- Update basic properties on agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/create
- Create agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/credentials/update
- Update credentials on agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/delete
- Delete agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/owners/update
- Update owners on agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/permissions/update
- Update exposed permissions and required permissions on agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/tag/update
- Update tags of agent identity blueprints
- Action: microsoft.directory/agentIdentityBlueprints/verification/update
- Update verification on agent identity blueprints
- Action: microsoft.directory/agentUsers/assignLicense
- Assign product licenses for agent users
- Action: microsoft.directory/agentUsers/basic/update
- Update basic properties on agent users, such display name, user type, and mail nickname
- Action: microsoft.directory/agentUsers/create
- Create agent users
- Action: microsoft.directory/agentUsers/delete
- Delete agent users
- Action: microsoft.directory/agentUsers/disable
- Disable agent users
- Action: microsoft.directory/agentUsers/enable
- Enable agent users
- Action: microsoft.directory/agentUsers/invalidateAllRefreshTokens
- Force sign-out by invalidating agent user refresh tokens
- Action: microsoft.directory/agentUsers/lifeCycleInfo/read
- Read lifecycle information of agent users, such as employeeLeaveDateTime
- Action: microsoft.directory/agentUsers/lifeCycleInfo/update
- Update lifecycle information of agent users, such as employeeLeaveDateTime
- Action: microsoft.directory/agentUsers/manager/update
- Update manager for agent users
- Action: microsoft.directory/agentUsers/photo/update
- Update photo of agent users
- Action: microsoft.directory/agentUsers/reprocessLicenseAssignment
- Reprocess license assignments for agent users
- Action: microsoft.directory/agentUsers/restore
- Restore deleted agent users
- Action: microsoft.directory/agentUsers/revokeSignInSessions
- Revoke sign-in sessions for agent users
- Action: microsoft.directory/agentUsers/sponsors/update
- Update sponsors of agent users
- Action: microsoft.directory/agentUsers/usageLocation/update
- Update usage location of agent users
- Action: microsoft.directory/agentUsers/userPrincipalName/update
- Update the user principal name of agent users
- Action: microsoft.directory/deletedItems.agentIdentities/delete
- Permanently delete agent identities, which can no longer be restored
- Action: microsoft.directory/deletedItems.agentIdentities/restore
- Restore soft-deleted agent identities to original state
- Action: microsoft.directory/deletedItems.agentIdentityBlueprintPrincipals/delete
- Permanently delete agent identity blueprint principals, which can no longer be restored
- Action: microsoft.directory/deletedItems.agentIdentityBlueprintPrincipals/restore
- Restore soft-deleted agent identity blueprint principals to original state
- Action: microsoft.directory/deletedItems.agentIdentityBlueprints/delete
- Permanently delete agent identity blueprints, which can no longer be restored
- Action: microsoft.directory/deletedItems.agentIdentityBlueprints/restore
- Restore soft-deleted agent identity blueprints to original state
- Action: microsoft.directory/entitlementManagement/allProperties/read
- Read all properties in Microsoft Entra entitlement management
- Action: microsoft.directory/subscribedSkus/standard/read
- Read basic properties on subscriptions
- Action: microsoft.directory/users/allProperties/read
- Read all properties of users
- Action: microsoft.office365.copilot/allEntities/allProperties/allTasks
- Create and manage all settings for Microsoft Copilot
- Action: microsoft.office365.messageCenter/messages/read
- Read messages in Message Center in the Microsoft 365 admin center, excluding security messages
- Action: microsoft.office365.network/performance/allProperties/read
- Read all network performance properties in the Microsoft 365 admin center
- Action: microsoft.office365.search/content/manage
- Create and delete content, and read and update all properties in Microsoft Search
- Action: microsoft.office365.serviceHealth/allEntities/allTasks
- Read and configure Service Health in the Microsoft 365 admin center
- Action: microsoft.office365.supportTickets/allEntities/allTasks
- Create and manage Microsoft 365 service requests
- Action: microsoft.office365.usageReports/allEntities/allProperties/read
- Read Office 365 usage reports
- Action: microsoft.office365.webPortal/allEntities/standard/read
- Read basic properties on all resources in the Microsoft 365 admin center