Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 22:07 UTC Customize Public modeDiscuss ChangeIntel on Discord

Recorded 25 Oct 2026 at 17:12 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.

Identity Governance Administrator

Manage access using Microsoft Entra ID for identity governance scenarios.

Cite this recorded revision

What it said

Permission coverage
Documented resource actions
Action: microsoft.directory/accessReviews/allProperties/allTasks
Create and delete access reviews, and read and update all properties of access reviews in Microsoft Entra ID
Action: microsoft.directory/accessReviews/definitions.applications/allProperties/allTasks
Manage access reviews of application role assignments in Microsoft Entra ID
Action: microsoft.directory/accessReviews/definitions.entitlementManagement/allProperties/allTasks
Manage access reviews for access package assignments in entitlement management
Action: microsoft.directory/accessReviews/definitions.groups/allProperties/read
Read all properties of access reviews for membership in Security and Microsoft 365 groups, including role-assignable groups.
Action: microsoft.directory/accessReviews/definitions.groups/allProperties/update
Update all properties of access reviews for membership in Security and Microsoft 365 groups, excluding role-assignable groups.
Action: microsoft.directory/accessReviews/definitions.groups/create
Create access reviews for membership in Security and Microsoft 365 groups.
Action: microsoft.directory/accessReviews/definitions.groups/delete
Delete access reviews for membership in Security and Microsoft 365 groups.
Action: microsoft.directory/entitlementManagement/allProperties/allTasks
Create and delete resources, and read and update all properties in Microsoft Entra entitlement management
Action: microsoft.directory/groups/members/update
Update members of Security groups and Microsoft 365 groups, excluding role-assignable groups
Action: microsoft.directory/servicePrincipals/appRoleAssignedTo/update
Update service principal role assignments
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 22:07 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current