Role Actions
7Control Plane
0Management Plane
7User Access
0Template ID
4a5d8f65-41da-4de4-8968-e035b65339cfCategoria
M365EAM Tier
Management Plane (Tier 1)Enterprise Access Model: Management Plane
Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.
Esta role é classificada como Management Plane porque todas as suas 7 ações são desse tier.
7 Management Plane
Descrição
Can read sign-in and audit reports.
Role Definition (JSON)
{"@odata.type": "#microsoft.graph.unifiedRoleDefinition","id": "4a5d8f65-41da-4de4-8968-e035b65339cf","displayName": "Reports Reader","description": "Can read sign-in and audit reports.","isBuiltIn": true,"isEnabled": true,"isPrivileged": false,"rolePermissions": [{"allowedResourceActions": ["microsoft.azure.serviceHealth/allEntities/allTasks",
Permissões completas
Todas as 7 role actions desta role, classificadas por tier do EAM.
| Role Action | Categoria | Tier |
|---|---|---|
microsoft.azure.serviceHealth/allEntities/allTasks | Support and Service Health | Tier 1 |
microsoft.directory/auditLogs/allProperties/read | Security and Compliance | Tier 1 |
microsoft.directory/provisioningLogs/allProperties/read | Security and Compliance | Tier 1 |
microsoft.directory/signInReports/allProperties/read | Security and Compliance | Tier 1 |
microsoft.office365.network/performance/allProperties/read | Microsoft 365 Support Operations | Tier 1 |
microsoft.office365.usageReports/allEntities/allProperties/read | Microsoft 365 Support Operations | Tier 1 |
microsoft.office365.webPortal/allEntities/standard/read | Microsoft 365 Support Operations | Tier 1 |
7 de 7 role actions
PowerShell
Get-MgRoleManagementDirectoryRoleDefinition ` -UnifiedRoleDefinitionId "4a5d8f65-41da-4de4-8968-e035b65339cf"
Microsoft Graph
GET https://graph.microsoft.com/v1.0/ roleManagement/directory/ roleDefinitions/4a5d8f65-41da-4de4-8968-e035b65339cf