ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 263/264 feeds/APIs · 418/442 docs · checked 18:59 UTC Customize Public modeDiscuss ChangeIntel on Discord

Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

Microsoft Entra roleMicrosoft Learn

Agent ID Administrator

Manage all aspects of agents in a tenant including identity lifecycle operations for agent blueprints, agent identity blueprint principals, agent identities, and agentic users.

Cite this recorded revision

What it said

Permission coverage
Documented resource actions
Action: microsoft.azure.serviceHealth/allEntities/allTasks
Read and configure Azure Service Health
Action: microsoft.azure.supportTickets/allEntities/allTasks
Create and manage Azure support tickets
Action: microsoft.directory/agentIdentities/appRoleAssignedTo/update
Update agent identity role assignments
Action: microsoft.directory/agentIdentities/authentication/update
Update authentication on agent identities
Action: microsoft.directory/agentIdentities/basic/update
Update basic properties on agent identities
Action: microsoft.directory/agentIdentities/create
Create agent identities
Action: microsoft.directory/agentIdentities/delete
Delete agent identities
Action: microsoft.directory/agentIdentities/disable
Disable agent identities
Action: microsoft.directory/agentIdentities/enable
Enable agent identities
Action: microsoft.directory/agentIdentities/owners/update
Update owners on agent identities
Action: microsoft.directory/agentIdentities/tag/update
Update tags of agent identities
Action: microsoft.directory/agentIdentityBlueprintPrincipals/appRoleAssignedTo/update
Update agent identity blueprint principal role assignments
Action: microsoft.directory/agentIdentityBlueprintPrincipals/authentication/update
Update authentication on agent identity blueprint principals
Action: microsoft.directory/agentIdentityBlueprintPrincipals/basic/update
Update basic properties on agent identity blueprint principals
Action: microsoft.directory/agentIdentityBlueprintPrincipals/create
Create agent identity blueprint principals
Action: microsoft.directory/agentIdentityBlueprintPrincipals/delete
Delete agent identity blueprint principals
Action: microsoft.directory/agentIdentityBlueprintPrincipals/disable
Disable agent identity blueprint principals
Action: microsoft.directory/agentIdentityBlueprintPrincipals/enable
Enable agent identity blueprint principals
Action: microsoft.directory/agentIdentityBlueprintPrincipals/owners/update
Update owners on agent identity blueprint principals
Action: microsoft.directory/agentIdentityBlueprintPrincipals/tag/update
Update tags of agent identity blueprint principals
Action: microsoft.directory/agentIdentityBlueprints/allProperties/read
Read all properties of agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/allProperties/update
Update all properties of agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/appRoles/update
Update appRoles on agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/audience/update
Update audience on agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/authentication/update
Update authentication on agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/basic/update
Update basic properties on agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/create
Create agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/credentials/update
Update credentials on agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/delete
Delete agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/owners/update
Update owners on agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/permissions/update
Update exposed permissions and required permissions on agent identity blueprints
Action: microsoft.directory/agentIdentityBlueprints/tag/update
Update tags of agent identity blueprints
Action: microsoft.directory/agentUsers/assignLicense
Assign product licenses for agent users
Action: microsoft.directory/agentUsers/basic/update
Update basic properties on agent users, such display name, user type, and mail nickname
Action: microsoft.directory/agentUsers/create
Create agent users
Action: microsoft.directory/agentUsers/delete
Delete agent users
Action: microsoft.directory/agentUsers/disable
Disable agent users
Action: microsoft.directory/agentUsers/enable
Enable agent users
Action: microsoft.directory/agentUsers/invalidateAllRefreshTokens
Force sign-out by invalidating agent user refresh tokens
Action: microsoft.directory/agentUsers/lifeCycleInfo/read
Read lifecycle information of agent users, such as employeeLeaveDateTime
Action: microsoft.directory/agentUsers/lifeCycleInfo/update
Update lifecycle information of agent users, such as employeeLeaveDateTime
Action: microsoft.directory/agentUsers/manager/update
Update manager for agent users
Action: microsoft.directory/agentUsers/photo/update
Update photo of agent users
Action: microsoft.directory/agentUsers/reprocessLicenseAssignment
Reprocess license assignments for agent users
Action: microsoft.directory/agentUsers/restore
Restore deleted agent users
Action: microsoft.directory/agentUsers/revokeSignInSessions
Revoke sign-in sessions for agent users
Action: microsoft.directory/agentUsers/sponsors/update
Update sponsors of agent users
Action: microsoft.directory/agentUsers/usageLocation/update
Update usage location of agent users
Action: microsoft.directory/agentUsers/userPrincipalName/update
Update the user principal name of agent users
Action: microsoft.directory/auditLogs/allProperties/read
Read all properties on audit logs, excluding custom security attributes audit logs
Action: microsoft.directory/deletedItems.agentIdentities/delete
Permanently delete agent identities, which can no longer be restored
Action: microsoft.directory/deletedItems.agentIdentities/restore
Restore soft-deleted agent identities to original state
Action: microsoft.directory/deletedItems.agentIdentityBlueprintPrincipals/delete
Permanently delete agent identity blueprint principals, which can no longer be restored
Action: microsoft.directory/deletedItems.agentIdentityBlueprintPrincipals/restore
Restore soft-deleted agent identity blueprint principals to original state
Action: microsoft.directory/deletedItems.agentIdentityBlueprints/delete
Permanently delete agent identity blueprints, which can no longer be restored
Action: microsoft.directory/deletedItems.agentIdentityBlueprints/restore
Restore soft-deleted agent identity blueprints to original state
Action: microsoft.directory/externalUserProfiles/standard/read
Read standard properties of external user profiles in the extended directory for Teams
Action: microsoft.directory/groups.unified/createAsOwner
Create Microsoft 365 groups, excluding role-assignable groups. Creator is added as the first owner.
Action: microsoft.directory/groups/hiddenMembers/read
Read hidden members of Security groups and Microsoft 365 groups, including role-assignable groups
Action: microsoft.directory/organization/standard/read
Read basic properties on an organization
Action: microsoft.directory/policies/standard/read
Read basic properties on policies
Action: microsoft.directory/signInReports/allProperties/read
Read all properties on sign-in reports, including privileged properties
Action: microsoft.office365.serviceHealth/allEntities/allTasks
Read and configure Service Health in the Microsoft 365 admin center
Action: microsoft.office365.supportTickets/allEntities/allTasks
Create and manage Microsoft 365 service requests
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 22 Oct 18:59 UTC · 263 of 264 readable · 261 fully read · documentation 418/442 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.