External ID User Flow Attribute Administrator

Entra ID · Compliance · EAM ControlPlane

External ID User Flow Attribute Administrator

Control PlaneEntraOps · EAMCompliance

Dado verificado em · Fonte

Role Actions
1
Control Plane
1
Management Plane
0
User Access
0
Template ID
0f971eea-41eb-4569-a71e-57bb8a3eff1e
Categoria
Compliance
EAM Tier
Control Plane (Tier 0)
Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 1 ações são desse tier.

1 Control Plane

Ação responsável:

microsoft.directory/b2cUserAttribute/allProperties/allTasks

Descrição

Can create and manage the attribute schema available to all user flows.

Role Definition (JSON)

{
"@odata.type": "#microsoft.graph.unifiedRoleDefinition",
"id": "0f971eea-41eb-4569-a71e-57bb8a3eff1e",
"displayName": "External ID User Flow Attribute Administrator",
"description": "Can create and manage the attribute schema available to all user flows.",
"isBuiltIn": true,
"isEnabled": true,
"isPrivileged": false,
"rolePermissions": [
{
"allowedResourceActions": [
"microsoft.directory/b2cUserAttribute/allProperties/allTasks"

Permissões completas

Todas as 1 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/b2cUserAttribute/allProperties/allTasks
External IdentitiesTier 0

1 de 1 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "0f971eea-41eb-4569-a71e-57bb8a3eff1e"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/0f971eea-41eb-4569-a71e-57bb8a3eff1e
Ver a documentação oficial na Microsoft Learn

Roles relacionadas