Voltar

Attribute Definition Administrator

Entra ID · Compliance · EAM ControlPlane

Attribute Definition Administrator

Control PlaneEntraOps · EAMCompliance

Dado verificado em · Fonte

Role Actions
2
Control Plane
2
Management Plane
0
User Access
0
Template ID
8424c6f0-a189-499e-bbd0-26c1753c96d4
Categoria
Compliance
EAM Tier
Control Plane (Tier 0)
Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 2 ações são desse tier.

2 Control Plane

Ações responsáveis:

microsoft.directory/attributeSets/allProperties/allTasksmicrosoft.directory/customSecurityAttributeDefinitions/allProperties/allTasks

Descrição

Define and manage the definition of custom security attributes.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "8424c6f0-a189-499e-bbd0-26c1753c96d4",

  "displayName": "Attribute Definition Administrator",

  "description": "Define and manage the definition of custom security attributes.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": false,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.directory/attributeSets/allProperties/allTasks",

Permissões completas

Todas as 2 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/attributeSets/allProperties/allTasks
Privileged ABACTier 0
microsoft.directory/customSecurityAttributeDefinitions/allProperties/allTasks
Privileged ABACTier 0

2 de 2 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "8424c6f0-a189-499e-bbd0-26c1753c96d4"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/8424c6f0-a189-499e-bbd0-26c1753c96d4
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attribute Assignment Administrator
Tier 0Compliance
Attribute Assignment Reader
Tier 0Compliance
Attribute Definition Reader
Tier 0Compliance
Attribute Log Administrator
Tier 0Compliance
Attribute Provisioning Administrator
Tier 0Compliance