Microsoft Entra Joined Device Local Administrator
Control PlaneEntraOps · EAMDevice
Dado verificado em · Fonte
Role Actions
2Control Plane
0Management Plane
2User Access
0Template ID
9f06204d-73c1-4d4c-880a-6edb90606fd8Categoria
DeviceEAM Tier
Control Plane (Tier 0)Enterprise Access Model: Control Plane
Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.
Esta role é classificada como Control Plane porque a classificação vem da definição da própria role na fonte, não das ações listadas aqui.
2 Management Plane
Descrição
Users assigned to this role are added to the local administrators group on Microsoft Entra joined devices.
Role Definition (JSON)
{"@odata.type": "#microsoft.graph.unifiedRoleDefinition","id": "9f06204d-73c1-4d4c-880a-6edb90606fd8","displayName": "Microsoft Entra Joined Device Local Administrator","description": "Users assigned to this role are added to the local administrators group on Microsoft Entra joined devices.","isBuiltIn": true,"isEnabled": true,"isPrivileged": false,"rolePermissions": [{"allowedResourceActions": ["microsoft.directory/groupSettingTemplates/standard/read",
Permissões completas
Todas as 2 role actions desta role, classificadas por tier do EAM.
| Role Action | Categoria | Tier |
|---|---|---|
microsoft.directory/groupSettingTemplates/standard/read | Tenant Configuration (Reader) | Tier 1 |
microsoft.directory/groupSettings/standard/read | Tenant Configuration (Reader) | Tier 1 |
2 de 2 role actions
PowerShell
Get-MgRoleManagementDirectoryRoleDefinition ` -UnifiedRoleDefinitionId "9f06204d-73c1-4d4c-880a-6edb90606fd8"
Microsoft Graph
GET https://graph.microsoft.com/v1.0/ roleManagement/directory/ roleDefinitions/9f06204d-73c1-4d4c-880a-6edb90606fd8