Voltar

Attribute Definition Reader

Entra ID · Compliance · EAM ControlPlane

Attribute Definition Reader

Control PlaneEntraOps · EAMCompliance

Dado verificado em · Fonte

Role Actions
2
Control Plane
2
Management Plane
0
User Access
0
Template ID
1d336d2c-4ae8-42ef-9711-b3604ce3fc2c
Categoria
Compliance
EAM Tier
Control Plane (Tier 0)
Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 2 ações são desse tier.

2 Control Plane

Ações responsáveis:

microsoft.directory/attributeSets/allProperties/readmicrosoft.directory/customSecurityAttributeDefinitions/allProperties/read

Descrição

Read the definition of custom security attributes.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "1d336d2c-4ae8-42ef-9711-b3604ce3fc2c",

  "displayName": "Attribute Definition Reader",

  "description": "Read the definition of custom security attributes.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": false,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.directory/attributeSets/allProperties/read",

Permissões completas

Todas as 2 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/attributeSets/allProperties/read
Privileged ABACTier 0
microsoft.directory/customSecurityAttributeDefinitions/allProperties/read
Privileged ABACTier 0

2 de 2 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "1d336d2c-4ae8-42ef-9711-b3604ce3fc2c"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/1d336d2c-4ae8-42ef-9711-b3604ce3fc2c
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attribute Assignment Administrator
Tier 0Compliance
Attribute Assignment Reader
Tier 0Compliance
Attribute Definition Administrator
Tier 0Compliance
Attribute Log Administrator
Tier 0Compliance
Attribute Provisioning Administrator
Tier 0Compliance