Microsoft Entra roles

Find built-in roles, understand their documented resource actions, and follow changes to the public reference.

Source and coverage · 136 documented roles

Baseline 22 Oct 2026. Changes compare accepted reference reads, not tenant assignments or effective access. Full collection limits

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Changes since baseline 22 Oct 2026 18:56 UTC. Earlier edits are unknown.

Permission history across roles

Dated change ledger

1 matching transition

Dates show when ChangeIntel observed the reference. Each interval starts at the previous accepted check; Microsoft's actual edit time and effective tenant access are not established.

Observed 23 Oct 2026 UTC

Application Developer Changed+15 added23 Oct 2026 13:24 UTC → 23 Oct 2026 19:54 UTC

Role history and retained evidence

Actions added to this role's reference

microsoft.directory/applications/appRoles/update
Update the appRoles property on all types of applications
microsoft.directory/applications/audience/update
Update the audience property for applications
microsoft.directory/applications/authentication/update
Update authentication on all types of applications
microsoft.directory/applications/basic/update
Update basic properties for applications
microsoft.directory/applications/credentials/update
Update application credentials
microsoft.directory/applications/delete
Delete all types of applications
microsoft.directory/applications/disablement/update
Update whether an application is enabled for users to sign in
microsoft.directory/applications/extensionProperties/update
Update extension properties on applications
microsoft.directory/applications/notes/update
Update notes of applications
microsoft.directory/applications/owners/update
Update owners of applications
microsoft.directory/applications/permissions/update
Update exposed permissions and required permissions on all types of applications
microsoft.directory/applications/policies/update
Update policies of applications
microsoft.directory/applications/tag/update
Update tags of applications
microsoft.directory/applications/verification/update
Update application's verification property
microsoft.directory/deletedItems.applications/delete
Permanently delete applications, which can no longer be restored