Guest User

User AccessEntraOps · EAMIdentity

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

10dae51f-b6af-4016-8d66-8c2a99b929b3

Categoria

Identity

EAM Tier

User Access (Tier 2)

Enterprise Access Model: User Access

Acesso de usuario e leitura basica. Menor impacto de seguranca.

Esta role é classificada como User Access porque todas as suas 24 ações são desse tier.

24 User Access

Descrição

Default role for guest users. Can read a limited set of directory information.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "10dae51f-b6af-4016-8d66-8c2a99b929b3",
  "displayName": "Guest User",
  "description": "Default role for guest users. Can read a limited set of directory information.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/applications/owners/limitedRead",

Permissões completas

Todas as 24 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/applications/owners/limitedRead`	Guest user	Tier 2
`microsoft.directory/applications/policies/limitedRead`	Guest user	Tier 2
`microsoft.directory/applications/standard/limitedRead`	Guest user	Tier 2
`microsoft.directory/directoryRoleTemplates/allProperties/read`	Default member	Tier 2
`microsoft.directory/domains/standard/read`	Default member, Guest user	Tier 2
`microsoft.directory/groups/appRoleAssignments/limitedRead`	Guest user	Tier 2
`microsoft.directory/groups/memberOf/limitedRead`	Guest user	Tier 2
`microsoft.directory/groups/members/limitedRead`	Guest user	Tier 2
`microsoft.directory/groups/owners/limitedRead`	Guest user	Tier 2
`microsoft.directory/groups/settings/limitedRead`	Guest user	Tier 2
`microsoft.directory/groups/standard/limitedRead`	Guest user	Tier 2
`microsoft.directory/multiTenantOrganization/standard/read`	Default member, Guest user	Tier 2
`microsoft.directory/multiTenantOrganization/tenants/standard/read`	Default member, Guest user	Tier 2
`microsoft.directory/organization/basicProfile/read`	Guest user	Tier 2
`microsoft.directory/servicePrincipals/appRoleAssignedTo/limitedRead`	Guest user	Tier 2
`microsoft.directory/servicePrincipals/appRoleAssignments/limitedRead`	Guest user	Tier 2
`microsoft.directory/servicePrincipals/memberOf/limitedRead`	Guest user	Tier 2
`microsoft.directory/servicePrincipals/oAuth2PermissionGrants/limitedRead`	Guest user	Tier 2
`microsoft.directory/servicePrincipals/ownedObjects/limitedRead`	Guest user	Tier 2
`microsoft.directory/servicePrincipals/owners/limitedRead`	Guest user	Tier 2
`microsoft.directory/servicePrincipals/policies/limitedRead`	Guest user	Tier 2
`microsoft.directory/servicePrincipals/standard/limitedRead`	Guest user	Tier 2
`microsoft.directory/users/guestBasicProfile/limitedRead`	Guest user	Tier 2
`microsoft.directory/users/inviteGuest`	External Identities	Tier 2

24 de 24 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "10dae51f-b6af-4016-8d66-8c2a99b929b3"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/10dae51f-b6af-4016-8d66-8c2a99b929b3

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Guest Inviter

Tier 2Identity

Restricted Guest User

Agent ID Administrator

Tier 0Identity