Partner Tier1 Support

Privilegiada

Control PlaneEntraOps · EAMOther

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

4ba39ca4-527c-499a-b93d-d9b492c50246

Categoria

Other

EAM Tier

Control Plane (Tier 0)

Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque 30 de 40 ações (75%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.

30 Control Plane10 Management Plane

Descrição

Do not use - not intended for general use.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "4ba39ca4-527c-499a-b93d-d9b492c50246",
  "displayName": "Partner Tier1 Support",
  "description": "Do not use - not intended for general use.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": true,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/applications/appRoles/update",

Permissões completas

Todas as 40 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/applications/appRoles/update`	Application and Workload Identity	Tier 0
`microsoft.directory/applications/audience/update`	Application and Workload Identity	Tier 0
`microsoft.directory/applications/authentication/update`	Application and Workload Identity	Tier 0
`microsoft.directory/applications/credentials/update`	Application and Workload Identity	Tier 0
`microsoft.directory/applications/notes/update`	Application and Workload Identity	Tier 0
`microsoft.directory/applications/owners/update`	Application and Workload Identity	Tier 0
`microsoft.directory/applications/permissions/update`	Application and Workload Identity	Tier 0
`microsoft.directory/applications/policies/update`	Tenant Policy Management	Tier 0
`microsoft.directory/applications/tag/update`	Application and Workload Identity	Tier 0
`microsoft.directory/deletedItems.groups/restore`	Group Management	Tier 0
`microsoft.directory/deletedItems.users/restore`	Global User Management	Tier 0
`microsoft.directory/groups/create`	Group Management	Tier 0
`microsoft.directory/groups/delete`	Group Management	Tier 0
`microsoft.directory/groups/members/update`	Group Management	Tier 0
`microsoft.directory/groups/owners/update`	Group Management	Tier 0
`microsoft.directory/groups/restore`	Group Management	Tier 0
`microsoft.directory/oAuth2PermissionGrants/allProperties/allTasks`	Application and Workload Identity	Tier 0
`microsoft.directory/servicePrincipals/appRoleAssignedTo/update`	Application and Workload Identity	Tier 0
`microsoft.directory/users/assignLicense`	License Management	Tier 0
`microsoft.directory/users/basic/update`	Global User Management	Tier 0
`microsoft.directory/users/create`	Global User Management	Tier 0
`microsoft.directory/users/delete`	Global User Management	Tier 0
`microsoft.directory/users/disable`	Global User Management	Tier 0
`microsoft.directory/users/enable`	Global User Management	Tier 0
`microsoft.directory/users/invalidateAllRefreshTokens`	Global User Management	Tier 0
`microsoft.directory/users/manager/update`	Global User Management	Tier 0
`microsoft.directory/users/password/update`	Global User Management	Tier 0
`microsoft.directory/users/photo/update`	Global User Management	Tier 0
`microsoft.directory/users/restore`	Global User Management	Tier 0
`microsoft.directory/users/userPrincipalName/update`	Global User Management	Tier 0
`microsoft.azure.serviceHealth/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.azure.supportTickets/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.directory/applications/basic/update`	Application and Workload Identity	Tier 1
`microsoft.directory/contacts/basic/update`	Microsoft Exchange Online	Tier 1
`microsoft.directory/contacts/create`	Microsoft Exchange Online	Tier 1
`microsoft.directory/contacts/delete`	Microsoft Exchange Online	Tier 1
`microsoft.directory/groups.unified/assignedLabels/update`	Microsoft 365 Group Management	Tier 1
`microsoft.office365.serviceHealth/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.supportTickets/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1

40 de 40 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "4ba39ca4-527c-499a-b93d-d9b492c50246"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/4ba39ca4-527c-499a-b93d-d9b492c50246

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Billing Administrator

Tier 0Other

Partner Tier2 Support

Agent ID Administrator

Tier 0Identity