Compliance Data Administrator

Control PlaneEntraOps · EAMCompliance

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

e6d1a23a-da11-4be4-9570-befc86d067a7

Categoria

Compliance

EAM Tier

Control Plane (Tier 0)

Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque 1 de 9 ações (11%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.

1 Control Plane7 Management Plane1 User Access

Ação responsável:

microsoft.directory/cloudAppSecurity/allProperties/allTasks

Descrição

Creates and manages compliance content.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "e6d1a23a-da11-4be4-9570-befc86d067a7",
  "displayName": "Compliance Data Administrator",
  "description": "Creates and manages compliance content.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/cloudAppSecurity/allProperties/allTasks",

Permissões completas

Todas as 9 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/cloudAppSecurity/allProperties/allTasks`	Cloud Access Security Broker	Tier 0
`microsoft.azure.informationProtection/allEntities/allTasks`	Microsoft Information Protection	Tier 1
`microsoft.azure.serviceHealth/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.azure.supportTickets/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.office365.complianceManager/allEntities/allTasks`	Security and Compliance	Tier 1
`microsoft.office365.serviceHealth/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.supportTickets/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1
`microsoft.directory/authorizationPolicy/standard/read`	Default member	Tier 2

9 de 9 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "e6d1a23a-da11-4be4-9570-befc86d067a7"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/e6d1a23a-da11-4be4-9570-befc86d067a7

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attribute Assignment Administrator

Tier 0Compliance

Attribute Assignment Reader

Tier 0Compliance

Attribute Definition Administrator

Tier 0Compliance

Attribute Definition Reader

Tier 0Compliance

Attribute Log Administrator

Tier 0Compliance