Microsoft Entra built-in rolePublic reference
User Administrator
Can manage all aspects of users and groups, including resetting passwords for limited admins.
Explicit references to this role
These items name the role, a previously observed name, or its template GUID. A text reference does not establish impact, an assignment, or equivalent permissions. Connections use the current collected items.
- Why Entra Administrators Cannot Disable Their Own AccountsOffice 365 for IT Pros (Tony Redmond) · explicit role reference
- Should You Use the New Microsoft Entra Tenant Governance or Azure Lighthouse? (part 3 of 3)Core Infrastructure and Security Blog · explicit role reference
- Primer: How to Use JSON Batching to Speed up Graph ProcessingOffice 365 for IT Pros (Tony Redmond) · explicit role reference
- MC1409305 · Microsoft Entra: Blocking new assignments to partner tier support rolesMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- MC1296473 · Microsoft 365 Copilot: New AI Reader role for Agent 365 (read-only access)Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- MC1245636 · AI Admin RBAC updatesMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
Microsoft's role reference · Explore the separate Graph OAuth permission catalog. Resource actions do not establish an OAuth-scope mapping.