Voltar

External Identity Provider Administrator

Entra ID · Security · EAM ControlPlane

External Identity Provider Administrator

Privilegiada
Control PlaneEntraOps · EAMSecurity

Dado verificado em · Fonte

Role Actions
2
Control Plane
2
Management Plane
0
User Access
0
Template ID
be2f45a1-457d-42af-a067-6ec1fa63bc45
Categoria
Security
EAM Tier
Control Plane (Tier 0)
Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 2 ações são desse tier.

2 Control Plane

Ações responsáveis:

microsoft.directory/domains/federation/updatemicrosoft.directory/identityProviders/allProperties/allTasks

Descrição

Can configure identity providers for use in direct federation.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "be2f45a1-457d-42af-a067-6ec1fa63bc45",

  "displayName": "External Identity Provider Administrator",

  "description": "Can configure identity providers for use in direct federation.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": true,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.directory/domains/federation/update",

Permissões completas

Todas as 2 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/domains/federation/update
AuthenticationTier 0
microsoft.directory/identityProviders/allProperties/allTasks
External IdentitiesTier 0

2 de 2 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "be2f45a1-457d-42af-a067-6ec1fa63bc45"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/be2f45a1-457d-42af-a067-6ec1fa63bc45
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Authentication Administrator
Tier 0Security
Authentication Extensibility Administrator
Tier 0Security
Authentication Extensibility Password Administrator
Tier 0Security
Authentication Policy Administrator
Tier 0Security
B2C IEF Keyset Administrator
Tier 0Security