Dynamics 365 Business Central Administrator

Management PlaneEntraOps · EAMMicrosoft 365

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

963797fb-eb3b-4cde-8ce3-5878b3f32a3f

Categoria

M365

EAM Tier

Management Plane (Tier 1)

Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque 4 de 8 ações (50%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.

4 Management Plane4 User Access

Descrição

Access and perform all administrative tasks on Dynamics 365 Business Central environments.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "963797fb-eb3b-4cde-8ce3-5878b3f32a3f",
  "displayName": "Dynamics 365 Business Central Administrator",
  "description": "Access and perform all administrative tasks on Dynamics 365 Business Central environments.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.azure.serviceHealth/allEntities/allTasks",

Permissões completas

Todas as 8 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.azure.serviceHealth/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.dynamics365.businessCentral/allEntities/allProperties/allTasks`	Dynamics 365	Tier 1
`microsoft.office365.serviceHealth/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1
`microsoft.directory/domains/standard/read`	Default member, Guest user	Tier 2
`microsoft.directory/organization/standard/read`	Default member	Tier 2
`microsoft.directory/subscribedSkus/standard/read`	Default member	Tier 2
`microsoft.directory/users/standard/read`	Default member	Tier 2

8 de 8 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "963797fb-eb3b-4cde-8ce3-5878b3f32a3f"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/963797fb-eb3b-4cde-8ce3-5878b3f32a3f

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Azure DevOps Administrator

Tier 1Microsoft 365

Dragon Administrator

Tier 1Microsoft 365

Dynamics 365 Administrator

Tier 1Microsoft 365

Edge Administrator

Tier 1Microsoft 365

Exchange Administrator

Tier 1Microsoft 365