Role Actions
2Control Plane
1Management Plane
1User Access
0Template ID
5b784334-f94b-471a-a387-e7219fc49ca2Categoria
ComplianceEAM Tier
Control Plane (Tier 0)Enterprise Access Model: Control Plane
Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.
Esta role é classificada como Control Plane porque 1 de 2 ações (50%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.
1 Control Plane1 Management Plane
Ação responsável:
microsoft.azure.customSecurityAttributeDiagnosticSettings/allEntities/allProperties/allTasksDescrição
Read audit logs and configure diagnostic settings for events related to custom security attributes.
Role Definition (JSON)
{"@odata.type": "#microsoft.graph.unifiedRoleDefinition","id": "5b784334-f94b-471a-a387-e7219fc49ca2","displayName": "Attribute Log Administrator","description": "Read audit logs and configure diagnostic settings for events related to custom security attributes.","isBuiltIn": true,"isEnabled": true,"isPrivileged": false,"rolePermissions": [{"allowedResourceActions": ["microsoft.azure.customSecurityAttributeDiagnosticSettings/allEntities/allProperties/allTasks",
Permissões completas
Todas as 2 role actions desta role, classificadas por tier do EAM.
| Role Action | Categoria | Tier |
|---|---|---|
microsoft.azure.customSecurityAttributeDiagnosticSettings/allEntities/allProperties/allTasks | Global Security and Compliance Management | Tier 0 |
microsoft.directory/customSecurityAttributeAuditLogs/allProperties/read | Security and Compliance | Tier 1 |
2 de 2 role actions
PowerShell
Get-MgRoleManagementDirectoryRoleDefinition ` -UnifiedRoleDefinitionId "5b784334-f94b-471a-a387-e7219fc49ca2"
Microsoft Graph
GET https://graph.microsoft.com/v1.0/ roleManagement/directory/ roleDefinitions/5b784334-f94b-471a-a387-e7219fc49ca2