Microsoft Entra built-in rolePublic reference

Resource Policy Reader

Can read resource policy definitions, assignments, and tenant-wide configuration, and evaluate policies without making changes.

Compare definitions Microsoft reference

Documented resource actions

5 documented actions

These are Microsoft's documented resource actions, separate from Graph OAuth permissions and tenant assignments. Descriptions are shown as supplied in the reference.

Action	Description
microsoft.directory/resourcePolicy/assignments/standard/read	Read resource policy assignments standard properties.
microsoft.directory/resourcePolicy/configuration/standard/read	Read standard properties of the tenant-wide resource policy configuration, such as the privileged-read app ID.
microsoft.directory/resourcePolicy/definitions/standard/read	Read resource policy definitions standard properties.
microsoft.directory/resourcePolicy/evaluateAssignedPolicies	Evaluate all policies assigned to a resource.
microsoft.directory/resourcePolicy/evaluatePolicy	Evaluate a specific resource policy against a supplied resource.