Microsoft Entra built-in rolePublic reference
Global Reader
Can read everything that a Global Administrator can, but not update anything.
Explicit references to this role
These items name the role, a previously observed name, or its template GUID. A text reference does not establish impact, an assignment, or equivalent permissions. Connections use the current collected items.
- Microsoft Purview: View only Role management enhancementsMicrosoft 365 Roadmap · explicit role reference
- MC1470425 · Microsoft Copilot Cost Management: September UpdatesReference-tenant notice · explicit role reference; verify applicability in your tenant
- MC1462464 · Microsoft Defender for Cloud Apps: App Governance support for the Cloud Application Administrator role is being retiredReference-tenant notice · explicit role reference; verify applicability in your tenant
- MC1403403 · (Updated) Microsoft Purview compliance portal: View-only role management enhancementsReference-tenant notice · explicit role reference; verify applicability in your tenant
Microsoft's role reference · Explore the separate Graph OAuth permission catalog. Resource actions do not establish an OAuth-scope mapping.