Desktop Analytics Administrator

Management PlaneEntraOps · EAMDevice

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

38a96431-2bdf-4b4c-8b6e-5d3d8abac1a4

Categoria

Device

EAM Tier

Management Plane (Tier 1)

Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque 3 de 4 ações (75%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.

3 Management Plane1 User Access

Ações responsáveis:

microsoft.azure.serviceHealth/allEntities/allTasksmicrosoft.azure.supportTickets/allEntities/allTasksmicrosoft.office365.desktopAnalytics/allEntities/allTasks

Descrição

Can access and manage Desktop management tools and services.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "38a96431-2bdf-4b4c-8b6e-5d3d8abac1a4",
  "displayName": "Desktop Analytics Administrator",
  "description": "Can access and manage Desktop management tools and services.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.azure.serviceHealth/allEntities/allTasks",

Permissões completas

Todas as 4 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.azure.serviceHealth/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.azure.supportTickets/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.office365.desktopAnalytics/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.directory/authorizationPolicy/standard/read`	Default member	Tier 2

4 de 4 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "38a96431-2bdf-4b4c-8b6e-5d3d8abac1a4"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/38a96431-2bdf-4b4c-8b6e-5d3d8abac1a4

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Printer Administrator

Tier 1Device

Printer Technician

Tier 1Device

Application Developer

Tier 1Application

Attack Payload Author

Tier 1Security

Attack Simulation Administrator

Tier 1Security