Voltar

Guest Inviter

Entra ID · Identity · EAM UserAccess

Guest Inviter

User AccessEntraOps · EAMIdentity

Dado verificado em · Fonte

Role Actions
17
Control Plane
0
Management Plane
0
User Access
17
Template ID
95e79109-95c0-4d8e-aee3-d01accf2d47b
Categoria
Identity
EAM Tier
User Access (Tier 2)
Enterprise Access Model: User Access

Acesso de usuario e leitura basica. Menor impacto de seguranca.

Esta role é classificada como User Access porque todas as suas 17 ações são desse tier.

17 User Access

Descrição

Can invite guest users independent of the 'members can invite guests' setting.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "95e79109-95c0-4d8e-aee3-d01accf2d47b",

  "displayName": "Guest Inviter",

  "description": "Can invite guest users independent of the 'members can invite guests' setting.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": false,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.directory/users/appRoleAssignments/read",

Permissões completas

Todas as 17 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/users/appRoleAssignments/read
Default memberTier 2
microsoft.directory/users/deviceForResourceAccount/read
Default memberTier 2
microsoft.directory/users/directReports/read
Default memberTier 2
microsoft.directory/users/inviteGuest
External IdentitiesTier 2
microsoft.directory/users/invitedBy/read
Default memberTier 2
microsoft.directory/users/licenseDetails/read
Default memberTier 2
microsoft.directory/users/manager/read
Default memberTier 2
microsoft.directory/users/memberOf/read
Default memberTier 2
microsoft.directory/users/oAuth2PermissionGrants/read
Default memberTier 2
microsoft.directory/users/ownedDevices/read
Default memberTier 2
microsoft.directory/users/ownedObjects/read
Default memberTier 2
microsoft.directory/users/photo/read
Default memberTier 2
microsoft.directory/users/registeredDevices/read
Default memberTier 2
microsoft.directory/users/scopedRoleMemberOf/read
Default memberTier 2
microsoft.directory/users/sponsorOf/read
Default memberTier 2
microsoft.directory/users/sponsors/read
Default memberTier 2
microsoft.directory/users/standard/read
Default memberTier 2

17 de 17 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "95e79109-95c0-4d8e-aee3-d01accf2d47b"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/95e79109-95c0-4d8e-aee3-d01accf2d47b
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Guest User
Tier 2Identity
Restricted Guest User
Tier 2Identity
Tenant Creator
Tier 2Identity
User
Tier 2Identity
Agent ID Administrator
Tier 0Identity