Voltar

Attack Payload Author

Entra ID · Security · EAM ManagementPlane

Attack Payload Author

Management PlaneEntraOps · EAMSecurity

Dado verificado em · Fonte

Role Actions
2
Control Plane
0
Management Plane
2
User Access
0
Template ID
9c6df0f2-1e7c-4dc3-b195-66dfbd24aa8f
Categoria
Security
EAM Tier
Management Plane (Tier 1)
Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque todas as suas 2 ações são desse tier.

2 Management Plane

Ações responsáveis:

microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasksmicrosoft.office365.protectionCenter/attackSimulator/reports/allProperties/read

Descrição

Can create attack payloads that an administrator can initiate later.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "9c6df0f2-1e7c-4dc3-b195-66dfbd24aa8f",

  "displayName": "Attack Payload Author",

  "description": "Can create attack payloads that an administrator can initiate later.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": false,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasks",

Permissões completas

Todas as 2 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasks
Security and ComplianceTier 1
microsoft.office365.protectionCenter/attackSimulator/reports/allProperties/read
Security and ComplianceTier 1

2 de 2 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "9c6df0f2-1e7c-4dc3-b195-66dfbd24aa8f"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/9c6df0f2-1e7c-4dc3-b195-66dfbd24aa8f
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attack Simulation Administrator
Tier 1Security
Azure Information Protection Administrator
Tier 1Security
Customer Lockbox Access Approver
Tier 1Security
Network Administrator
Tier 1Security
Purview Workload Content Administrator
Tier 1Security