Microsoft Entra roles

Find built-in roles, understand their documented resource actions, and follow changes to the public reference.

Source and coverage · 136 documented roles

Baseline 22 Oct 2026. Changes compare accepted reference reads, not tenant assignments or effective access. Full collection limits

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Roles by documented action

657 matching action patterns

Search an action or its description to find roles that list it. Wildcards are shown literally; assignments and effective access are outside this catalog.

Action	Roles listing this action
microsoft.intune/allEntities/allTasksOpen history across roles	Global Administrator Intune Administrator
microsoft.intune/allEntities/readOpen history across roles	Security Operator
microsoft.microsoft365.organizationalData/allEntities/allProperties/allTasksOpen history across roles	Global Administrator Organizational Data Source Administrator
microsoft.microsoft365.organizationalData/allEntities/allProperties/readOpen history across roles	Global Reader
microsoft.networkAccess/allEntities/allProperties/allTasksOpen history across roles	Global Administrator Global Secure Access Administrator Security Administrator
microsoft.networkAccess/allEntities/allProperties/readOpen history across roles	Global Reader Security Reader
microsoft.networkAccess/trafficLogs/standard/readOpen history across roles	Global Administrator Global Secure Access Log Reader
microsoft.office365.complianceManager/allEntities/allTasksOpen history across roles	Compliance Administrator Compliance Data Administrator Global Administrator
microsoft.office365.copilot/allEntities/allProperties/allTasksOpen history across roles	AI Administrator Global Administrator
microsoft.office365.copilot/allEntities/allProperties/readOpen history across roles	AI Reader Global Reader
microsoft.office365.desktopAnalytics/allEntities/allTasksOpen history across roles	Desktop Analytics Administrator Global Administrator
microsoft.office365.exchange/allEntities/basic/allTasksOpen history across roles	Exchange Administrator Global Administrator
microsoft.office365.exchange/migration/allProperties/allTasksOpen history across roles	Exchange Recipient Administrator
microsoft.office365.exchange/recipients/allProperties/allTasksOpen history across roles	Exchange Recipient Administrator
microsoft.office365.fileStorageContainers/allEntities/allProperties/allTasksOpen history across roles	Global Administrator SharePoint Embedded Administrator
microsoft.office365.fileStorageContainers/allEntities/allProperties/readOpen history across roles	Global Reader
microsoft.office365.knowledge/contentUnderstanding/allProperties/allTasksOpen history across roles	Global Administrator Knowledge Administrator
microsoft.office365.knowledge/contentUnderstanding/analytics/allProperties/readOpen history across roles	Global Administrator Knowledge Manager
microsoft.office365.knowledge/knowledgeNetwork/allProperties/allTasksOpen history across roles	Global Administrator Knowledge Administrator
microsoft.office365.knowledge/knowledgeNetwork/topicVisibility/allProperties/allTasksOpen history across roles	Global Administrator Knowledge Manager
microsoft.office365.knowledge/learningSources/allProperties/allTasksOpen history across roles	Global Administrator Knowledge Administrator
microsoft.office365.lockbox/allEntities/allTasksOpen history across roles	Customer Lockbox Access Approver Global Administrator
microsoft.office365.messageCenter/messages/readOpen history across roles	AI Administrator AI Reader Global Administrator Global Reader Global Secure Access Administrator Hybrid Identity Administrator Message Center Privacy Reader Message Center Reader Microsoft Graph Data Connect Administrator Microsoft Hardware Warranty Administrator Office Apps Administrator Organizational Data Source Administrator Search Administrator Search Editor User Experience Success Manager Viva Glint Tenant Administrator Viva Pulse Administrator Yammer Administrator
microsoft.office365.messageCenter/securityMessages/readOpen history across roles	Global Administrator Global Reader Message Center Privacy Reader
microsoft.office365.migrations/allEntities/allProperties/allTasksOpen history across roles	Global Administrator Microsoft 365 Migration Administrator SharePoint Administrator SharePoint Advanced Management Administrator