Microsoft Entra roles

Find built-in roles, understand their documented resource actions, and follow changes to the public reference.

Source and coverage · 136 documented roles

Baseline 22 Oct 2026. Changes compare accepted reference reads, not tenant assignments or effective access. Full collection limits

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Roles by documented action

657 matching action patterns

Search an action or its description to find roles that list it. Wildcards are shown literally; assignments and effective access are outside this catalog.

Action	Roles listing this action
microsoft.backup/siteProtectionUnits/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/siteRestoreArtifacts/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/userDriveProtectionUnits/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/userDriveRestoreArtifacts/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/userMailboxProtectionUnits/allProperties/allTasksOpen history across roles	Exchange Administrator Exchange Backup Administrator
microsoft.backup/userMailboxRestoreArtifacts/allProperties/allTasksOpen history across roles	Exchange Administrator Exchange Backup Administrator
microsoft.cloudPC/allEntities/allProperties/allTasksOpen history across roles	Global Administrator Intune Administrator Windows 365 Administrator
microsoft.cloudPC/allEntities/allProperties/readOpen history across roles	Global Reader
microsoft.commerce.billing/allEntities/allProperties/allTasksOpen history across roles	Billing Administrator Global Administrator
microsoft.commerce.billing/allEntities/allProperties/readOpen history across roles	Global Reader
microsoft.commerce.billing/purchases/standard/readOpen history across roles	Global Administrator Global Reader User Experience Success Manager
microsoft.commerce.tenantRelationships/customerDelegatedAdminPrivileges/allProperties/allTasksOpen history across roles	Customer Delegated Admin Relationship Administrator Global Administrator
microsoft.directory/accessReviews/allProperties/allTasksOpen history across roles	Global Administrator Identity Governance Administrator
microsoft.directory/accessReviews/allProperties/readOpen history across roles	Global Reader
microsoft.directory/accessReviews/definitions.applications/allProperties/allTasksOpen history across roles	Identity Governance Administrator User Administrator
microsoft.directory/accessReviews/definitions.applications/allProperties/readOpen history across roles	Privileged Role Administrator
microsoft.directory/accessReviews/definitions.directoryRoles/allProperties/allTasksOpen history across roles	Privileged Role Administrator
microsoft.directory/accessReviews/definitions.directoryRoles/allProperties/readOpen history across roles	User Administrator
microsoft.directory/accessReviews/definitions.entitlementManagement/allProperties/allTasksOpen history across roles	Identity Governance Administrator User Administrator
microsoft.directory/accessReviews/definitions.groups/allProperties/readOpen history across roles	Identity Governance Administrator Privileged Role Administrator User Administrator
microsoft.directory/accessReviews/definitions.groups/allProperties/updateOpen history across roles	Identity Governance Administrator User Administrator
microsoft.directory/accessReviews/definitions.groups/createOpen history across roles	Identity Governance Administrator User Administrator
microsoft.directory/accessReviews/definitions.groups/deleteOpen history across roles	Identity Governance Administrator User Administrator
microsoft.directory/accessReviews/definitions.groupsAssignableToRoles/allProperties/updateOpen history across roles	Privileged Role Administrator
microsoft.directory/accessReviews/definitions.groupsAssignableToRoles/createOpen history across roles	Privileged Role Administrator