Recorded 25 Oct 2026 at 17:12 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Guest Inviter
Can invite guest users independent of the 'members can invite guests' setting.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.directory/users/appRoleAssignments/read
- Read application role assignments for users
- Action: microsoft.directory/users/deviceForResourceAccount/read
- Read deviceForResourceAccount of users
- Action: microsoft.directory/users/directReports/read
- Read the direct reports for users
- Action: microsoft.directory/users/inviteGuest
- Invite guest users
- Action: microsoft.directory/users/invitedBy/read
- Read the user that invited an external user to a tenant
- Action: microsoft.directory/users/licenseDetails/read
- Read license details of users
- Action: microsoft.directory/users/manager/read
- Read manager of users
- Action: microsoft.directory/users/memberOf/read
- Read the group memberships of users
- Action: microsoft.directory/users/oAuth2PermissionGrants/read
- Read delegated permission grants on users
- Action: microsoft.directory/users/ownedDevices/read
- Read owned devices of users
- Action: microsoft.directory/users/ownedObjects/read
- Read owned objects of users
- Action: microsoft.directory/users/photo/read
- Read photo of users
- Action: microsoft.directory/users/registeredDevices/read
- Read registered devices of users
- Action: microsoft.directory/users/scopedRoleMemberOf/read
- Read user's membership of a Microsoft Entra role, that is scoped to an administrative unit
- Action: microsoft.directory/users/sponsorOf/read
- Read all the agents or applications the user is sponsor of
- Action: microsoft.directory/users/sponsors/read
- Read sponsors of users
- Action: microsoft.directory/users/standard/read
- Read basic properties on users