Lifecycle Workflows Administrator
PrivilegiadaControl PlaneEntraOps · EAMCompliance
Dado verificado em · Fonte
Role Actions
3Control Plane
1Management Plane
2User Access
0Template ID
59d46f88-662b-457b-bceb-5c3809e5908fCategoria
ComplianceEAM Tier
Control Plane (Tier 0)Enterprise Access Model: Control Plane
Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.
Esta role é classificada como Control Plane porque 1 de 3 ações (33%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.
1 Control Plane2 Management Plane
Ação responsável:
microsoft.directory/lifecycleWorkflows/workflows/allProperties/allTasksDescrição
Create and manage all aspects of workflows and tasks associated with Lifecycle Workflows in Microsoft Entra ID.
Role Definition (JSON)
{"@odata.type": "#microsoft.graph.unifiedRoleDefinition","id": "59d46f88-662b-457b-bceb-5c3809e5908f","displayName": "Lifecycle Workflows Administrator","description": "Create and manage all aspects of workflows and tasks associated with Lifecycle Workflows in Microsoft Entra ID.","isBuiltIn": true,"isEnabled": true,"isPrivileged": true,"rolePermissions": [{"allowedResourceActions": ["microsoft.directory/lifecycleWorkflows/workflows/allProperties/allTasks",
Permissões completas
Todas as 3 role actions desta role, classificadas por tier do EAM.
| Role Action | Categoria | Tier |
|---|---|---|
microsoft.directory/lifecycleWorkflows/workflows/allProperties/allTasks | User Lifecycle and Provisioning Management | Tier 0 |
microsoft.directory/organization/strongAuthentication/read | Tenant Configuration (Reader) | Tier 1 |
microsoft.directory/users/lifeCycleInfo/read | Tenant Configuration (Reader) | Tier 1 |
3 de 3 role actions
PowerShell
Get-MgRoleManagementDirectoryRoleDefinition ` -UnifiedRoleDefinitionId "59d46f88-662b-457b-bceb-5c3809e5908f"
Microsoft Graph
GET https://graph.microsoft.com/v1.0/ roleManagement/directory/ roleDefinitions/59d46f88-662b-457b-bceb-5c3809e5908f