People Administrator

Management PlaneEntraOps · EAMIdentity

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

024906de-61e5-49c8-8572-40335f1e0e10

Categoria

Identity

EAM Tier

Management Plane (Tier 1)

Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque 2 de 5 ações (40%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.

2 Management Plane3 User Access

Ações responsáveis:

microsoft.office365.webPortal/allEntities/standard/readmicrosoft.peopleAdmin/organization/allProperties/update

Descrição

Manage profile photos of users and people settings for all users in the organization.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "024906de-61e5-49c8-8572-40335f1e0e10",
  "displayName": "People Administrator",
  "description": "Manage profile photos of users and people settings for all users in the organization.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.office365.webPortal/allEntities/standard/read",

Permissões completas

Todas as 5 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1
`microsoft.peopleAdmin/organization/allProperties/update`	Microsoft People	Tier 1
`microsoft.people/users/photo/read`	Default member	Tier 2
`microsoft.people/users/photo/update`	Default member	Tier 2
`microsoft.peopleAdmin/organization/allProperties/read`	Default member	Tier 2

5 de 5 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "024906de-61e5-49c8-8572-40335f1e0e10"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/024906de-61e5-49c8-8572-40335f1e0e10

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Directory Readers

Tier 1Identity

Extended Directory User Administrator

Tier 1Identity

Global Secure Access Log Reader

Tier 1Identity

Agent ID Administrator

Tier 0Identity

Agent ID Developer

Tier 0Identity