Roles and permissions
Microsoft's documented built-in roles and permissions for each admin system, and the changes observed in each public reference.
Source and coverage
A permission catalog for creating roles, not a catalog of tenant role definitions. Workload activation, data scopes and assignments are not established here.
1 of 1 reference page has a baseline · 0 failed their last read. A failed or unparsed page cannot establish that a role or permission disappeared.
These public references do not establish tenant assignments or effective access. Reference labels and anchors do not establish stable vendor template IDs or confirmed renames.
Saved searches 0
Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.
| Role or permission | Changed | Reference type | Documented terms |
|---|---|---|---|
Approve hard actionslabel:security-operations--security-data:Approve hard actions:Manage | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Approve soft actionslabel:security-operations--security-data:Approve soft actions:Manage | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Automation ruleslabel:security-operations--security-data:Automation rules:Read | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Automation ruleslabel:security-operations--security-data:Automation rules:Manage | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Execute hard actionslabel:security-operations--security-data:Execute hard actions:Manage | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Execute query actionslabel:security-operations--security-data:Execute query actions:Manage | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Execute soft actionslabel:security-operations--security-data:Execute soft actions:Manage | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Integrationslabel:security-operations--security-data:Integrations:Read | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Integrationslabel:security-operations--security-data:Integrations:Manage | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Playbookslabel:security-operations--security-data:Playbooks:Read | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Playbookslabel:security-operations--security-data:Playbooks:Manage | 10 Nov 2026 11:06 UTC | Permission catalog entry | 2 documented termsPermission group
Level
|
Source: Microsoft, © Microsoft Corporation. Read the original for descriptions, exceptions and applicability.