Billing Administrator

Control PlaneEntraOps · EAMOther

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

b0f54661-2d74-4c50-afa3-1ec803f12efe

Categoria

Other

EAM Tier

Control Plane (Tier 0)

Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque 1 de 7 ações (14%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.

1 Control Plane6 Management Plane

Ação responsável:

microsoft.directory/organization/basic/update

Descrição

Can perform common billing related tasks like updating payment information.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "b0f54661-2d74-4c50-afa3-1ec803f12efe",
  "displayName": "Billing Administrator",
  "description": "Can perform common billing related tasks like updating payment information.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/organization/basic/update",

Permissões completas

Todas as 7 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/organization/basic/update`	Tenant Management	Tier 0
`microsoft.azure.serviceHealth/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.azure.supportTickets/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.commerce.billing/allEntities/allProperties/allTasks`	Microsoft 365 Billing Management	Tier 1
`microsoft.office365.serviceHealth/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.supportTickets/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1

7 de 7 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "b0f54661-2d74-4c50-afa3-1ec803f12efe"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/b0f54661-2d74-4c50-afa3-1ec803f12efe

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Partner Tier1 Support

Tier 0Other

Partner Tier2 Support

Agent ID Administrator

Tier 0Identity