Entra Backup Administrator

Control PlaneEntraOps · EAMIdentity

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb

Categoria

Identity

EAM Tier

Control Plane (Tier 0)

Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 5 ações são desse tier.

5 Control Plane

Descrição

Manage all aspects of Microsoft Entra Backup, such as create recovery jobs and manage backup snapshots.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb",
  "displayName": "Entra Backup Administrator",
  "description": "Manage all aspects of Microsoft Entra Backup, such as create recovery jobs and manage backup snapshots.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/backup/preview/cancel",

Permissões completas

Todas as 5 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/backup/preview/cancel`	Backup and Recovery	Tier 0
`microsoft.directory/backup/preview/create`	Backup and Recovery	Tier 0
`microsoft.directory/backup/recovery/cancel`	Backup and Recovery	Tier 0
`microsoft.directory/backup/recovery/create`	Backup and Recovery	Tier 0
`microsoft.directory/backup/standard/read`	Backup and Recovery	Tier 0

5 de 5 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Agent ID Administrator

Tier 0Identity

Agent ID Developer

Tier 0Identity

Agent Registry Administrator

Tier 0Identity

Directory Synchronization Accounts

Tier 0Identity

Directory Writers

Tier 0Identity