Voltar

Attribute Provisioning Administrator

Entra ID · Compliance · EAM ControlPlane

Attribute Provisioning Administrator

Privilegiada
Control PlaneEntraOps · EAMCompliance

Dado verificado em · Fonte

Role Actions
2
Control Plane
2
Management Plane
0
User Access
0
Template ID
ecb2c6bf-0ab6-418e-bd87-7986f8d63bbe
Categoria
Compliance
EAM Tier
Control Plane (Tier 0)
Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 2 ações são desse tier.

2 Control Plane

Ações responsáveis:

microsoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/readmicrosoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/update

Descrição

Read and edit the provisioning configuration of all active custom security attributes for an application.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "ecb2c6bf-0ab6-418e-bd87-7986f8d63bbe",

  "displayName": "Attribute Provisioning Administrator",

  "description": "Read and edit the provisioning configuration of all active custom security attributes for an application.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": true,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/read",

Permissões completas

Todas as 2 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/read
Application and Workload IdentityTier 0
microsoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/update
Application and Workload IdentityTier 0

2 de 2 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "ecb2c6bf-0ab6-418e-bd87-7986f8d63bbe"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/ecb2c6bf-0ab6-418e-bd87-7986f8d63bbe
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attribute Assignment Administrator
Tier 0Compliance
Attribute Assignment Reader
Tier 0Compliance
Attribute Definition Administrator
Tier 0Compliance
Attribute Definition Reader
Tier 0Compliance
Attribute Log Administrator
Tier 0Compliance