Office Apps Administrator

Entra ID · M365 · EAM ManagementPlane

Office Apps Administrator

Management PlaneEntraOps · EAMMicrosoft 365

Dado verificado em · Fonte

Role Actions
7
Control Plane
0
Management Plane
7
User Access
0
Template ID
2b745bdf-0803-4d80-aa65-822c4493daac
Categoria
M365
EAM Tier
Management Plane (Tier 1)
Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque todas as suas 7 ações são desse tier.

7 Management Plane

Descrição

Can manage Office apps cloud services, including policy and settings management, and manage the ability to select, unselect and publish 'what's new' feature content to end-user's devices.

Role Definition (JSON)

{
"@odata.type": "#microsoft.graph.unifiedRoleDefinition",
"id": "2b745bdf-0803-4d80-aa65-822c4493daac",
"displayName": "Office Apps Administrator",
"description": "Can manage Office apps cloud services, including policy and settings management, and manage the ability to select, unselect and publish 'what's new' feature content to end-user's devices.",
"isBuiltIn": true,
"isEnabled": true,
"isPrivileged": false,
"rolePermissions": [
{
"allowedResourceActions": [
"microsoft.azure.serviceHealth/allEntities/allTasks",

Permissões completas

Todas as 7 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.azure.serviceHealth/allEntities/allTasks
Support and Service HealthTier 1
microsoft.azure.supportTickets/allEntities/allTasks
Support and Service HealthTier 1
microsoft.office365.messageCenter/messages/read
Microsoft 365 Support OperationsTier 1
microsoft.office365.serviceHealth/allEntities/allTasks
Microsoft 365 Support OperationsTier 1
microsoft.office365.supportTickets/allEntities/allTasks
Microsoft 365 Support OperationsTier 1
microsoft.office365.userCommunication/allEntities/allTasks
Microsoft 365 Platform OperationsTier 1
microsoft.office365.webPortal/allEntities/standard/read
Microsoft 365 Support OperationsTier 1

7 de 7 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "2b745bdf-0803-4d80-aa65-822c4493daac"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/2b745bdf-0803-4d80-aa65-822c4493daac
Ver a documentação oficial na Microsoft Learn

Roles relacionadas