Microsoft Entra built-in rolePublic reference
Security Administrator
Can read security information and reports, and manage configuration in Microsoft Entra ID and Office 365.
Explicit references to this role
These items name the role, a previously observed name, or its template GUID. A text reference does not establish impact, an assignment, or equivalent permissions. Connections use the current collected items.
- Microsoft Purview: Endpoint Data Loss Prevention-View-only access to device onboarding with the View-Only Device Management roleMicrosoft 365 Message Center Archive by Merill FernandoMicrosoft 365 Roadmap · explicit role reference
- Microsoft Purview Compliance Portal: Expanding access to Diagnostics to Compliance Administrator, Security Administrator and Organization ManagementMicrosoft 365 Message Center Archive by Merill FernandoMicrosoft 365 Roadmap · explicit role reference
- Entra 🆔 News #165 → This week in Microsoft EntraEntra.News - Merill Fernando · explicit role reference
- What’s new in Microsoft Entra: September 2026Microsoft Entra Blog · explicit role reference
- Entra 🆔 News #163 → This week in Microsoft EntraEntra.News - Merill Fernando · explicit role reference
- Organize your multitenant view with Tenant Groups in Microsoft DefenderMicrosoft Defender XDR Blog · explicit role reference
- Microsoft Purview compliance portal: Data Loss Prevention - Expanding access to Diagnostics to Compliance Administrator, Security Administrator and Organization ManagementMicrosoft 365 Message Center Archive by Merill FernandoMicrosoft 365 Roadmap · explicit role reference
- Data Security Posture Management for AIMicrosoft Purview Blog · explicit role reference
- Identity and access (beta): 1 API change passageMicrosoft Graph changelog · explicit role reference
- Multi-tenant endpoint security policies distribution is now in Public PreviewMicrosoft Defender for Endpoint Blog · explicit role reference
- MC1486293 · Microsoft Defender for Office 365: Changes to Unified RBAC permission mapping for Microsoft Entra Security Operator roleReturned by 1 reference tenant · Corroborated by Microsoft 365 Message Center Archive by Merill FernandoExplicit role reference; verify applicability in your tenant
- MC1462464 · Microsoft Defender for Cloud Apps: App Governance support for the Cloud Application Administrator role is being retiredReturned by 2 reference tenants · Corroborated by Microsoft 365 Message Center Archive by Merill FernandoExplicit role reference; verify applicability in your tenant
- MC1457836 · Tenant will be auto-enabled into Microsoft Defender Unified RBACReturned by 1 reference tenant · Corroborated by Microsoft 365 Message Center Archive by Merill FernandoExplicit role reference; verify applicability in your tenant
- MC1177179 · Microsoft Exchange Online: Remove-DkimSigningConfig cmdlet now available to tenant adminsMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- MC1143283 · Microsoft Purview | DLP - Enable Diagnostics for Compliance Admin, Security Admin, and Org Management rolesMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- MC1143992 · Microsoft 365 Apps admin center: Cloud Update feature now generally availableMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- MC1124559 · Microsoft Defender for Identity: Expiration required for Recommended test modeMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- MC787370 · Advanced Hunting Permissions update for some Microsoft Defender for Office 365 security adminsMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- Purview and Defender for Office 365 default roles and role groupsMicrosoft Learn · explicit role reference in the retained observation
Microsoft's role reference · Explore the separate Graph OAuth permission catalog. Resource actions do not establish an OAuth-scope mapping.