Permission history across roles
Follow an exact documented resource action through retained Entra role changes.
Literal action identifiers are matched exactly, including any wildcard. This is a history of public definitions, not tenant assignments or Microsoft Graph OAuth scopes. Changes before the baseline or between checks may be unknown.
microsoft.azure.serviceHealth/allEntities/allTasks
Current accepted reference: 25 Oct 2026 22:06 UTC · baseline 22 Oct 2026 18:56 UTC. This current membership is independent of the history filters.
48 roles currently list this exact action
- Agent ID Administrator
- AI Administrator
- AI Reader
- Application Administrator
- Authentication Administrator
- Azure Information Protection Administrator
- Billing Administrator
- Cloud Application Administrator
- Cloud Device Administrator
- Compliance Administrator
- Compliance Data Administrator
- Desktop Analytics Administrator
- Dragon Administrator
- Dynamics 365 Administrator
- Dynamics 365 Business Central Administrator
- Exchange Administrator
- Exchange Backup Administrator
- Fabric Administrator
- Global Administrator
- Global Reader
- Groups Administrator
- Helpdesk Administrator
- Hybrid Identity Administrator
- Insights Administrator
- License Administrator
- Microsoft 365 Backup Administrator
- Microsoft Graph Data Connect Administrator
- Office Apps Administrator
- Organizational Data Source Administrator
- Partner Tier1 Support
- Partner Tier2 Support
- Power Platform Administrator
- Privileged Authentication Administrator
- Reports Reader
- Security Administrator
- Security Reader
- Service Support Administrator
- SharePoint Administrator
- SharePoint Advanced Management Administrator
- SharePoint Backup Administrator
- Skype for Business Administrator
- Teams Administrator
- Teams Communications Administrator
- Teams Communications Support Engineer
- Teams Communications Support Specialist
- Teams Telephony Administrator
- User Administrator
- Viva Glint Tenant Administrator
Dated change ledger
0 matching transitionsDates show when ChangeIntel observed the reference. Each interval starts at the previous accepted check; Microsoft's actual edit time and effective tenant access are not established.
No retained changes match this view. The first capture is a baseline, not a list of newly introduced permissions.
History includes retained role transitions mentioning this action. Newly listed or unlisted roles are shown as listing observations; they are not inferred permission grants or revocations.