Voltar

Global Secure Access Log Reader

Entra ID · Identity · EAM ManagementPlane

Global Secure Access Log Reader

Management PlaneEntraOps · EAMIdentity

Dado verificado em · Fonte

Role Actions
1
Control Plane
0
Management Plane
1
User Access
0
Template ID
843318fb-79a6-4168-9e6f-aa9a07481cc4
Categoria
Identity
EAM Tier
Management Plane (Tier 1)
Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque todas as suas 1 ações são desse tier.

1 Management Plane

Ação responsável:

microsoft.networkAccess/trafficLogs/standard/read

Descrição

Provides designated security personnel with read-only access to network traffic logs in Microsoft Entra Internet Access and Microsoft Entra Private Access for detailed analysis.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "843318fb-79a6-4168-9e6f-aa9a07481cc4",

  "displayName": "Global Secure Access Log Reader",

  "description": "Provides designated security personnel with read-only access to network traffic logs in Microsoft Entra Internet Access and Microsoft Entra Private Access for detailed analysis.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": false,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.networkAccess/trafficLogs/standard/read"

Permissões completas

Todas as 1 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.networkAccess/trafficLogs/standard/read
Security and ComplianceTier 1

1 de 1 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "843318fb-79a6-4168-9e6f-aa9a07481cc4"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/843318fb-79a6-4168-9e6f-aa9a07481cc4
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Directory Readers
Tier 1Identity
Extended Directory User Administrator
Tier 1Identity
People Administrator
Tier 1Identity
Agent ID Administrator
Tier 0Identity
Agent ID Developer
Tier 0Identity