Role Actions
27Control Plane
0Management Plane
27User Access
0Template ID
f28a1f50-f6e7-4571-818b-6a12f2af6b6cCategoria
M365EAM Tier
Management Plane (Tier 1)Enterprise Access Model: Management Plane
Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.
Esta role é classificada como Management Plane porque todas as suas 27 ações são desse tier.
27 Management Plane
Descrição
Can manage all aspects of the SharePoint service.
Role Definition (JSON)
{"@odata.type": "#microsoft.graph.unifiedRoleDefinition","id": "f28a1f50-f6e7-4571-818b-6a12f2af6b6c","displayName": "SharePoint Administrator","description": "Can manage all aspects of the SharePoint service.","isBuiltIn": true,"isEnabled": true,"isPrivileged": false,"rolePermissions": [{"allowedResourceActions": ["microsoft.azure.serviceHealth/allEntities/allTasks",
Permissões completas
Todas as 27 role actions desta role, classificadas por tier do EAM.
| Role Action | Categoria | Tier |
|---|---|---|
microsoft.azure.serviceHealth/allEntities/allTasks | Support and Service Health | Tier 1 |
microsoft.azure.supportTickets/allEntities/allTasks | Support and Service Health | Tier 1 |
microsoft.backup/oneDriveForBusinessProtectionPolicies/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/oneDriveForBusinessRestoreSessions/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/restorePoints/sites/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/restorePoints/userDrives/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/sharePointProtectionPolicies/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/sharePointRestoreSessions/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/siteProtectionUnits/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/siteRestoreArtifacts/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/userDriveProtectionUnits/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.backup/userDriveRestoreArtifacts/allProperties/allTasks | Microsoft 365 Backup | Tier 1 |
microsoft.directory/groups.unified/assignedLabels/update | Microsoft 365 Group Management | Tier 1 |
microsoft.directory/groups.unified/basic/update | Microsoft 365 Group Management | Tier 1 |
microsoft.directory/groups.unified/create | Microsoft 365 Group Management | Tier 1 |
microsoft.directory/groups.unified/delete | Microsoft 365 Group Management | Tier 1 |
microsoft.directory/groups.unified/members/update | Microsoft 365 Group Management | Tier 1 |
microsoft.directory/groups.unified/owners/update | Microsoft 365 Group Management | Tier 1 |
microsoft.directory/groups.unified/restore | Microsoft 365 Group Management | Tier 1 |
microsoft.directory/groups/hiddenMembers/read | Tenant Configuration (Reader) | Tier 1 |
microsoft.office365.migrations/allEntities/allProperties/allTasks | Microsoft 365 Platform Operations | Tier 1 |
microsoft.office365.network/performance/allProperties/read | Microsoft 365 Support Operations | Tier 1 |
microsoft.office365.serviceHealth/allEntities/allTasks | Microsoft 365 Support Operations | Tier 1 |
microsoft.office365.sharePoint/allEntities/allTasks | Microsoft SharePoint | Tier 1 |
microsoft.office365.supportTickets/allEntities/allTasks | Microsoft 365 Support Operations | Tier 1 |
microsoft.office365.usageReports/allEntities/allProperties/read | Microsoft 365 Support Operations | Tier 1 |
microsoft.office365.webPortal/allEntities/standard/read | Microsoft 365 Support Operations | Tier 1 |
27 de 27 role actions
PowerShell
Get-MgRoleManagementDirectoryRoleDefinition ` -UnifiedRoleDefinitionId "f28a1f50-f6e7-4571-818b-6a12f2af6b6c"
Microsoft Graph
GET https://graph.microsoft.com/v1.0/ roleManagement/directory/ roleDefinitions/f28a1f50-f6e7-4571-818b-6a12f2af6b6c