Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

Microsoft Entra roleMicrosoft Learn

Partner Tier2 Support

Do not use - not intended for general use.

Cite this recorded revision

What it said

Permission coverage: Documented resource actions
Action: microsoft.azure.serviceHealth/allEntities/allTasks: Read and configure Azure Service Health
Action: microsoft.azure.supportTickets/allEntities/allTasks: Create and manage Azure support tickets
Action: microsoft.directory/applications/appRoles/update: Update the appRoles property on all types of applications
Action: microsoft.directory/applications/audience/update: Update the audience property for applications
Action: microsoft.directory/applications/authentication/update: Update authentication on all types of applications
Action: microsoft.directory/applications/basic/update: Update basic properties for applications
Action: microsoft.directory/applications/credentials/update: Update application credentials
Action: microsoft.directory/applications/notes/update: Update notes of applications
Action: microsoft.directory/applications/owners/update: Update owners of applications
Action: microsoft.directory/applications/permissions/update: Update exposed permissions and required permissions on all types of applications
Action: microsoft.directory/applications/policies/update: Update policies of applications
Action: microsoft.directory/applications/tag/update: Update tags of applications
Action: microsoft.directory/contacts/basic/update: Update basic properties on contacts
Action: microsoft.directory/contacts/create: Create contacts
Action: microsoft.directory/contacts/delete: Delete contacts
Action: microsoft.directory/deletedItems.groups/restore: Restore soft deleted groups to original state
Action: microsoft.directory/deletedItems.users/restore: Restore soft deleted users to original state
Action: microsoft.directory/domains/allProperties/allTasks: Create and delete domains, and read and update all properties
Action: microsoft.directory/groups.unified/assignedLabels/update: Update the assigned labels property on Microsoft 365 groups of assigned membership type, excluding role-assignable groups
Action: microsoft.directory/groups/create: Create Security groups and Microsoft 365 groups, excluding role-assignable groups
Action: microsoft.directory/groups/delete: Delete Security groups and Microsoft 365 groups, excluding role-assignable groups
Action: microsoft.directory/groups/members/update: Update members of Security groups and Microsoft 365 groups, excluding role-assignable groups
Action: microsoft.directory/groups/owners/update: Update owners of Security groups and Microsoft 365 groups, excluding role-assignable groups
Action: microsoft.directory/groups/restore: Restore groups from soft-deleted container
Action: microsoft.directory/oAuth2PermissionGrants/allProperties/allTasks: Create and delete OAuth 2.0 permission grants, and read and update all properties
Action: microsoft.directory/organization/basic/update: Update basic properties on organization
Action: microsoft.directory/roleAssignments/allProperties/allTasks: Create and delete role assignments, and read and update all role assignment properties
Action: microsoft.directory/roleDefinitions/allProperties/allTasks: Create and delete role definitions, and read and update all properties
Action: microsoft.directory/scopedRoleMemberships/allProperties/allTasks: Create and delete scopedRoleMemberships, and read and update all properties
Action: microsoft.directory/servicePrincipals/appRoleAssignedTo/update: Update service principal role assignments
Action: microsoft.directory/subscribedSkus/standard/read: Read basic properties on subscriptions
Action: microsoft.directory/users/assignLicense: Manage user licenses
Action: microsoft.directory/users/basic/update: Update basic properties on users
Action: microsoft.directory/users/create: Add users
Action: microsoft.directory/users/delete: Delete users
Action: microsoft.directory/users/disable: Disable users
Action: microsoft.directory/users/enable: Enable users
Action: microsoft.directory/users/invalidateAllRefreshTokens: Force sign-out by invalidating user refresh tokens
Action: microsoft.directory/users/manager/update: Update manager for users
Action: microsoft.directory/users/password/update: Reset passwords for all users
Action: microsoft.directory/users/photo/update: Update photo of users
Action: microsoft.directory/users/restore: Restore deleted users
Action: microsoft.directory/users/userPrincipalName/update: Update User Principal Name of users
Action: microsoft.office365.serviceHealth/allEntities/allTasks: Read and configure Service Health in the Microsoft 365 admin center
Action: microsoft.office365.supportTickets/allEntities/allTasks: Create and manage Microsoft 365 service requests
Action: microsoft.office365.webPortal/allEntities/standard/read: Read basic properties on all resources in the Microsoft 365 admin center