Voltar

Attribute Log Reader

Entra ID · Compliance · EAM ManagementPlane

Attribute Log Reader

Management PlaneEntraOps · EAMCompliance

Dado verificado em · Fonte

Role Actions
1
Control Plane
0
Management Plane
1
User Access
0
Template ID
9c99539d-8186-4804-835f-fd51ef9e2dcd
Categoria
Compliance
EAM Tier
Management Plane (Tier 1)
Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque todas as suas 1 ações são desse tier.

1 Management Plane

Ação responsável:

microsoft.directory/customSecurityAttributeAuditLogs/allProperties/read

Descrição

Read audit logs related to custom security attributes.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "9c99539d-8186-4804-835f-fd51ef9e2dcd",

  "displayName": "Attribute Log Reader",

  "description": "Read audit logs related to custom security attributes.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": false,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.directory/customSecurityAttributeAuditLogs/allProperties/read"

Permissões completas

Todas as 1 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/customSecurityAttributeAuditLogs/allProperties/read
Security and ComplianceTier 1

1 de 1 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "9c99539d-8186-4804-835f-fd51ef9e2dcd"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/9c99539d-8186-4804-835f-fd51ef9e2dcd
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Compliance Administrator
Tier 1Compliance
Tenant Governance Reader
Tier 1Compliance
Tenant Governance Relationship Administrator
Tier 1Compliance
Tenant Governance Relationship Reader
Tier 1Compliance
Application Developer
Tier 1Application