Recorded 22 Oct 2026 at 18:59 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Attribute Assignment Reader
Read custom security attribute keys and values for supported Microsoft Entra objects.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.directory/attributeSets/allProperties/read
- Read all properties of attribute sets
- Action: microsoft.directory/azureManagedIdentities/customSecurityAttributes/read
- Read custom security attribute values for Microsoft Entra managed identities
- Action: microsoft.directory/customSecurityAttributeDefinitions/allProperties/read
- Read all properties of custom security attribute definitions
- Action: microsoft.directory/devices/customSecurityAttributes/read
- Read custom security attribute values for devices
- Action: microsoft.directory/servicePrincipals/customSecurityAttributes/read
- Read custom security attribute values for service principals
- Action: microsoft.directory/users/customSecurityAttributes/read
- Read custom security attribute values for users