Microsoft Entra roles

Find built-in roles, understand their documented resource actions, and follow changes to the public reference.

Source and coverage · 136 documented roles

Baseline 22 Oct 2026. Changes compare accepted reference reads, not tenant assignments or effective access. Full collection limits

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Roles by documented action

657 matching action patterns

Search an action or its description to find roles that list it. Wildcards are shown literally; assignments and effective access are outside this catalog.

Action	Roles listing this action
microsoft.agentRegistry/allEntities/allProperties/allTasksOpen history across roles	Agent Registry Administrator Global Administrator
microsoft.agentRegistry/allEntities/allProperties/readOpen history across roles	Global Reader Security Administrator Security Reader
microsoft.azure.advancedThreatProtection/allEntities/allTasksOpen history across roles	Global Administrator Security Operator
microsoft.azure.customSecurityAttributeDiagnosticSettings/allEntities/allProperties/allTasksOpen history across roles	Attribute Log Administrator
microsoft.azure.devOps/allEntities/allTasksOpen history across roles	Azure DevOps Administrator
microsoft.azure.informationProtection/allEntities/allTasksOpen history across roles	Azure Information Protection Administrator Compliance Data Administrator Global Administrator
microsoft.azure.print/allEntities/allProperties/allTasksOpen history across roles	Printer Administrator
microsoft.azure.print/connectors/allProperties/readOpen history across roles	Printer Technician
microsoft.azure.print/printers/allProperties/readOpen history across roles	Printer Technician
microsoft.azure.print/printers/basic/updateOpen history across roles	Printer Technician
microsoft.azure.print/printers/registerOpen history across roles	Printer Technician
microsoft.azure.print/printers/unregisterOpen history across roles	Printer Technician
microsoft.azure.serviceHealth/allEntities/allTasksOpen history across roles	Agent ID Administrator AI Administrator AI Reader Application Administrator Authentication Administrator Azure Information Protection Administrator Billing Administrator Cloud Application Administrator Cloud Device Administrator Compliance Administrator Compliance Data Administrator Desktop Analytics Administrator Dragon Administrator Dynamics 365 Administrator Dynamics 365 Business Central Administrator Exchange Administrator Exchange Backup Administrator Fabric Administrator Global Administrator Global Reader Groups Administrator Helpdesk Administrator Hybrid Identity Administrator Insights Administrator License Administrator Microsoft 365 Backup Administrator Microsoft Graph Data Connect Administrator Office Apps Administrator Organizational Data Source Administrator Partner Tier1 Support Partner Tier2 Support Power Platform Administrator Privileged Authentication Administrator Reports Reader Security Administrator Security Reader Service Support Administrator SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator Skype for Business Administrator Teams Administrator Teams Communications Administrator Teams Communications Support Engineer Teams Communications Support Specialist Teams Telephony Administrator User Administrator Viva Glint Tenant Administrator
microsoft.azure.supportTickets/allEntities/allTasksOpen history across roles	Agent ID Administrator AI Administrator Application Administrator Authentication Administrator Authentication Policy Administrator Azure Information Protection Administrator Billing Administrator Cloud Application Administrator Compliance Administrator Compliance Data Administrator Desktop Analytics Administrator Dragon Administrator Dynamics 365 Administrator Exchange Administrator Exchange Backup Administrator Fabric Administrator Global Administrator Global Secure Access Administrator Groups Administrator Helpdesk Administrator Hybrid Identity Administrator Insights Administrator Intune Administrator Microsoft 365 Backup Administrator Microsoft Graph Data Connect Administrator Office Apps Administrator Organizational Data Source Administrator Partner Tier1 Support Partner Tier2 Support Power Platform Administrator Privileged Authentication Administrator Security Administrator Security Operator Service Support Administrator SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator Skype for Business Administrator Teams Administrator Teams Communications Administrator Teams External Collaboration Administrator Teams Telephony Administrator User Administrator Viva Glint Tenant Administrator Windows 365 Administrator
microsoft.backup/allEntities/allProperties/allTasksOpen history across roles	Global Administrator Microsoft 365 Backup Administrator
microsoft.backup/allEntities/allProperties/readOpen history across roles	Global Reader
microsoft.backup/exchangeProtectionPolicies/allProperties/allTasksOpen history across roles	Exchange Administrator Exchange Backup Administrator
microsoft.backup/exchangeRestoreSessions/allProperties/allTasksOpen history across roles	Exchange Administrator Exchange Backup Administrator
microsoft.backup/oneDriveForBusinessProtectionPolicies/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/oneDriveForBusinessRestoreSessions/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/restorePoints/sites/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/restorePoints/userDrives/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/restorePoints/userMailboxes/allProperties/allTasksOpen history across roles	Exchange Administrator Exchange Backup Administrator
microsoft.backup/sharePointProtectionPolicies/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator
microsoft.backup/sharePointRestoreSessions/allProperties/allTasksOpen history across roles	SharePoint Administrator SharePoint Advanced Management Administrator SharePoint Backup Administrator