Voltar

Attribute Provisioning Reader

Entra ID · Compliance · EAM ControlPlane

Attribute Provisioning Reader

Privilegiada
Control PlaneEntraOps · EAMCompliance

Dado verificado em · Fonte

Role Actions
1
Control Plane
1
Management Plane
0
User Access
0
Template ID
422218e4-db15-4ef9-bbe0-8afb41546d79
Categoria
Compliance
EAM Tier
Control Plane (Tier 0)
Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 1 ações são desse tier.

1 Control Plane

Ação responsável:

microsoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/read

Descrição

Read the provisioning configuration of all active custom security attributes for an application.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "422218e4-db15-4ef9-bbe0-8afb41546d79",

  "displayName": "Attribute Provisioning Reader",

  "description": "Read the provisioning configuration of all active custom security attributes for an application.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": true,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/read"

Permissões completas

Todas as 1 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/read
Application and Workload IdentityTier 0

1 de 1 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "422218e4-db15-4ef9-bbe0-8afb41546d79"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/422218e4-db15-4ef9-bbe0-8afb41546d79
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attribute Assignment Administrator
Tier 0Compliance
Attribute Assignment Reader
Tier 0Compliance
Attribute Definition Administrator
Tier 0Compliance
Attribute Definition Reader
Tier 0Compliance
Attribute Log Administrator
Tier 0Compliance