Attack Simulation Administrator

Management PlaneEntraOps · EAMSecurity

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

c430b396-e693-46cc-96f3-db01bf8bb62a

Categoria

Security

EAM Tier

Management Plane (Tier 1)

Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque todas as suas 3 ações são desse tier.

3 Management Plane

Ações responsáveis:

microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasksmicrosoft.office365.protectionCenter/attackSimulator/reports/allProperties/readmicrosoft.office365.protectionCenter/attackSimulator/simulation/allProperties/allTasks

Descrição

Can create and manage all aspects of attack simulation campaigns.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "c430b396-e693-46cc-96f3-db01bf8bb62a",
  "displayName": "Attack Simulation Administrator",
  "description": "Can create and manage all aspects of attack simulation campaigns.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasks",

Permissões completas

Todas as 3 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.office365.protectionCenter/attackSimulator/payload/allProperties/allTasks`	Security and Compliance	Tier 1
`microsoft.office365.protectionCenter/attackSimulator/reports/allProperties/read`	Security and Compliance	Tier 1
`microsoft.office365.protectionCenter/attackSimulator/simulation/allProperties/allTasks`	Security and Compliance	Tier 1

3 de 3 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "c430b396-e693-46cc-96f3-db01bf8bb62a"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/c430b396-e693-46cc-96f3-db01bf8bb62a

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attack Payload Author

Tier 1Security

Azure Information Protection Administrator

Tier 1Security

Customer Lockbox Access Approver

Tier 1Security

Network Administrator

Tier 1Security

Purview Workload Content Administrator

Tier 1Security