Compliance Administrator

Management PlaneEntraOps · EAMCompliance

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

17315797-102d-40b4-93e0-432062caca18

Categoria

Compliance

EAM Tier

Management Plane (Tier 1)

Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque todas as suas 7 ações são desse tier.

7 Management Plane

Descrição

Can read and manage compliance configuration and reports in Microsoft Entra ID and Microsoft 365.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "17315797-102d-40b4-93e0-432062caca18",
  "displayName": "Compliance Administrator",
  "description": "Can read and manage compliance configuration and reports in Microsoft Entra ID and Microsoft 365.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.azure.serviceHealth/allEntities/allTasks",

Permissões completas

Todas as 7 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.azure.serviceHealth/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.azure.supportTickets/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.directory/entitlementManagement/allProperties/read`	Tenant Configuration (Reader)	Tier 1
`microsoft.office365.complianceManager/allEntities/allTasks`	Security and Compliance	Tier 1
`microsoft.office365.serviceHealth/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.supportTickets/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1

7 de 7 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "17315797-102d-40b4-93e0-432062caca18"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/17315797-102d-40b4-93e0-432062caca18

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attribute Log Reader

Tier 1Compliance

Tenant Governance Reader

Tier 1Compliance

Tenant Governance Relationship Administrator

Tier 1Compliance

Tenant Governance Relationship Reader

Tier 1Compliance

Application Developer

Tier 1Application