Customer Lockbox Access Approver

Management PlaneEntraOps · EAMSecurity

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

5c4f9dcd-47dc-4cf7-8c9a-9e4207cbfc91

Categoria

Security

EAM Tier

Management Plane (Tier 1)

Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque todas as suas 2 ações são desse tier.

2 Management Plane

Ações responsáveis:

microsoft.office365.lockbox/allEntities/allTasksmicrosoft.office365.webPortal/allEntities/standard/read

Descrição

Can approve Microsoft support requests to access customer organizational data.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "5c4f9dcd-47dc-4cf7-8c9a-9e4207cbfc91",
  "displayName": "Customer Lockbox Access Approver",
  "description": "Can approve Microsoft support requests to access customer organizational data.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.office365.lockbox/allEntities/allTasks",

Permissões completas

Todas as 2 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.office365.lockbox/allEntities/allTasks`	Security and Compliance	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1

2 de 2 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "5c4f9dcd-47dc-4cf7-8c9a-9e4207cbfc91"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/5c4f9dcd-47dc-4cf7-8c9a-9e4207cbfc91

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Attack Payload Author

Tier 1Security

Attack Simulation Administrator

Tier 1Security

Azure Information Protection Administrator

Tier 1Security

Network Administrator

Tier 1Security

Purview Workload Content Administrator

Tier 1Security