SharePoint Advanced Management Administrator

Management PlaneEntraOps · EAMMicrosoft 365

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

99009c4a-3b3f-4957-82a9-9d35e12db77e

Categoria

M365

EAM Tier

Management Plane (Tier 1)

Enterprise Access Model: Management Plane

Funcoes de gestao de TI enterprise-wide. Alto impacto, mas sem controle total do tenant.

Esta role é classificada como Management Plane porque todas as suas 28 ações são desse tier.

28 Management Plane

Descrição

Manage all aspects of SharePoint Advanced Management.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "99009c4a-3b3f-4957-82a9-9d35e12db77e",
  "displayName": "SharePoint Advanced Management Administrator",
  "description": "Manage all aspects of SharePoint Advanced Management.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.azure.serviceHealth/allEntities/allTasks",

Permissões completas

Todas as 28 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.azure.serviceHealth/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.azure.supportTickets/allEntities/allTasks`	Support and Service Health	Tier 1
`microsoft.backup/oneDriveForBusinessProtectionPolicies/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/oneDriveForBusinessRestoreSessions/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/restorePoints/sites/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/restorePoints/userDrives/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/sharePointProtectionPolicies/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/sharePointRestoreSessions/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/siteProtectionUnits/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/siteRestoreArtifacts/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/userDriveProtectionUnits/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.backup/userDriveRestoreArtifacts/allProperties/allTasks`	Microsoft 365 Backup	Tier 1
`microsoft.directory/groups.unified/assignedLabels/update`	Microsoft 365 Group Management	Tier 1
`microsoft.directory/groups.unified/basic/update`	Microsoft 365 Group Management	Tier 1
`microsoft.directory/groups.unified/create`	Microsoft 365 Group Management	Tier 1
`microsoft.directory/groups.unified/delete`	Microsoft 365 Group Management	Tier 1
`microsoft.directory/groups.unified/members/update`	Microsoft 365 Group Management	Tier 1
`microsoft.directory/groups.unified/owners/update`	Microsoft 365 Group Management	Tier 1
`microsoft.directory/groups.unified/restore`	Microsoft 365 Group Management	Tier 1
`microsoft.directory/groups/hiddenMembers/read`	Tenant Configuration (Reader)	Tier 1
`microsoft.office365.migrations/allEntities/allProperties/allTasks`	Microsoft 365 Platform Operations	Tier 1
`microsoft.office365.network/performance/allProperties/read`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.serviceHealth/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.sharePoint/allEntities/allTasks`	Microsoft SharePoint	Tier 1
`microsoft.office365.sharePointAdvancedManagement/allEntities/allProperties/allTasks`	Microsoft SharePoint	Tier 1
`microsoft.office365.supportTickets/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.usageReports/allEntities/allProperties/read`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1

28 de 28 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "99009c4a-3b3f-4957-82a9-9d35e12db77e"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/99009c4a-3b3f-4957-82a9-9d35e12db77e

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Azure DevOps Administrator

Tier 1Microsoft 365

Dragon Administrator

Tier 1Microsoft 365

Dynamics 365 Administrator

Tier 1Microsoft 365

Dynamics 365 Business Central Administrator

Tier 1Microsoft 365

Edge Administrator

Tier 1Microsoft 365