Permission history across roles
Follow an exact documented resource action through retained Entra role changes.
Literal action identifiers are matched exactly, including any wildcard. This is a history of public definitions, not tenant assignments or Microsoft Graph OAuth scopes. Changes before the baseline or between checks may be unknown.
microsoft.office365.webPortal/allEntities/standard/read
Current accepted reference: 25 Oct 2026 22:06 UTC · baseline 22 Oct 2026 18:56 UTC. This current membership is independent of the history filters.
83 roles currently list this exact action
- AI Administrator
- AI Reader
- Application Administrator
- Authentication Administrator
- Azure Information Protection Administrator
- Billing Administrator
- Cloud App Security Administrator
- Cloud Application Administrator
- Compliance Administrator
- Compliance Data Administrator
- Customer Delegated Admin Relationship Administrator
- Customer Lockbox Access Approver
- Domain Name Administrator
- Dragon Administrator
- Dynamics 365 Administrator
- Dynamics 365 Business Central Administrator
- Edge Administrator
- Exchange Administrator
- Exchange Backup Administrator
- Fabric Administrator
- Global Administrator
- Global Reader
- Global Secure Access Administrator
- Groups Administrator
- Helpdesk Administrator
- Hybrid Identity Administrator
- Insights Administrator
- Insights Analyst
- Intune Administrator
- Kaizala Administrator
- Knowledge Administrator
- Knowledge Manager
- License Administrator
- Message Center Privacy Reader
- Message Center Reader
- Microsoft 365 Backup Administrator
- Microsoft 365 Migration Administrator
- Microsoft Graph Data Connect Administrator
- Microsoft Hardware Warranty Administrator
- Microsoft Hardware Warranty Specialist
- Network Administrator
- Office Apps Administrator
- Organizational Data Source Administrator
- Organizational Messages Approver
- Organizational Messages Writer
- Partner Tier1 Support
- Partner Tier2 Support
- Password Administrator
- People Administrator
- Power Platform Administrator
- Privileged Authentication Administrator
- Privileged Role Administrator
- Reports Reader
- Search Administrator
- Search Editor
- Security Administrator
- Security Reader
- Service Support Administrator
- SharePoint Administrator
- SharePoint Advanced Management Administrator
- SharePoint Backup Administrator
- SharePoint Embedded Administrator
- Skype for Business Administrator
- Teams Administrator
- Teams Communications Administrator
- Teams Communications Support Engineer
- Teams Communications Support Specialist
- Teams Devices Administrator
- Teams External Collaboration Administrator
- Teams Reader
- Teams Telephony Administrator
- Tenant Governance Reader
- Tenant Governance Relationship Administrator
- Tenant Governance Relationship Reader
- Usage Summary Reports Reader
- User Administrator
- User Experience Success Manager
- Virtual Visits Administrator
- Viva Glint Tenant Administrator
- Viva Goals Administrator
- Viva Pulse Administrator
- Windows 365 Administrator
- Yammer Administrator
Dated change ledger
0 matching transitionsDates show when ChangeIntel observed the reference. Each interval starts at the previous accepted check; Microsoft's actual edit time and effective tenant access are not established.
No retained changes match this view. The first capture is a baseline, not a list of newly introduced permissions.
History includes retained role transitions mentioning this action. Newly listed or unlisted roles are shown as listing observations; they are not inferred permission grants or revocations.