Role Actions
4Control Plane
0Management Plane
3User Access
1Template ID
74ef975b-6605-40af-a5d2-b9539d836353Categoria
M365EAM Tier
Management Plane (Tier 1)Enterprise Access Model: Management Plane
Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.
Esta role é classificada como Management Plane porque 3 de 4 ações (75%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.
3 Management Plane1 User Access
Ações responsáveis:
microsoft.office365.serviceHealth/allEntities/allTasksmicrosoft.office365.supportTickets/allEntities/allTasksmicrosoft.office365.webPortal/allEntities/standard/readDescrição
Can manage settings for Microsoft Kaizala.
Role Definition (JSON)
{"@odata.type": "#microsoft.graph.unifiedRoleDefinition","id": "74ef975b-6605-40af-a5d2-b9539d836353","displayName": "Kaizala Administrator","description": "Can manage settings for Microsoft Kaizala.","isBuiltIn": true,"isEnabled": true,"isPrivileged": false,"rolePermissions": [{"allowedResourceActions": ["microsoft.office365.serviceHealth/allEntities/allTasks",
Permissões completas
Todas as 4 role actions desta role, classificadas por tier do EAM.
| Role Action | Categoria | Tier |
|---|---|---|
microsoft.office365.serviceHealth/allEntities/allTasks | Microsoft 365 Support Operations | Tier 1 |
microsoft.office365.supportTickets/allEntities/allTasks | Microsoft 365 Support Operations | Tier 1 |
microsoft.office365.webPortal/allEntities/standard/read | Microsoft 365 Support Operations | Tier 1 |
microsoft.directory/authorizationPolicy/standard/read | Default member | Tier 2 |
4 de 4 role actions
PowerShell
Get-MgRoleManagementDirectoryRoleDefinition ` -UnifiedRoleDefinitionId "74ef975b-6605-40af-a5d2-b9539d836353"
Microsoft Graph
GET https://graph.microsoft.com/v1.0/ roleManagement/directory/ roleDefinitions/74ef975b-6605-40af-a5d2-b9539d836353