User

User AccessEntraOps · EAMIdentity

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

a0b1b346-4d3e-4e8b-98f8-753987be4970

Categoria

Identity

EAM Tier

User Access (Tier 2)

Enterprise Access Model: User Access

Acesso de usuario e leitura basica. Menor impacto de seguranca.

Esta role é classificada como User Access porque todas as suas 70 ações são desse tier.

70 User Access

Descrição

Default role for member users. Can read all and write a limited set of directory information.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "a0b1b346-4d3e-4e8b-98f8-753987be4970",
  "displayName": "User",
  "description": "Default role for member users. Can read all and write a limited set of directory information.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/administrativeUnits/members/read",

Permissões completas

Todas as 70 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/administrativeUnits/members/read`	Default member	Tier 2
`microsoft.directory/administrativeUnits/standard/read`	Default member	Tier 2
`microsoft.directory/agentIdentities/createAsOwner`	Default member	Tier 2
`microsoft.directory/agentIdentities/standard/read`	Default member	Tier 2
`microsoft.directory/agentIdentityBlueprintPrincipals/createAsOwner`	Default member	Tier 2
`microsoft.directory/agentIdentityBlueprintPrincipals/standard/read`	Default member	Tier 2
`microsoft.directory/agentIdentityBlueprints/standard/read`	Default member	Tier 2
`microsoft.directory/applicationPolicies/createAsOwner`	Extended member	Tier 2
`microsoft.directory/applicationPolicies/standard/read`	Default member	Tier 2
`microsoft.directory/applications/createAsOwner`	Extended member	Tier 2
`microsoft.directory/applications/owners/read`	Default member	Tier 2
`microsoft.directory/applications/policies/read`	Default member	Tier 2
`microsoft.directory/applications/standard/read`	Default member	Tier 2
`microsoft.directory/authorizationPolicy/standard/read`	Default member	Tier 2
`microsoft.directory/contacts/memberOf/read`	Default member	Tier 2
`microsoft.directory/contacts/standard/read`	Default member	Tier 2
`microsoft.directory/contracts/standard/read`	Default member	Tier 2
`microsoft.directory/devices/memberOf/read`	Default member	Tier 2
`microsoft.directory/devices/registeredOwners/read`	Default member	Tier 2
`microsoft.directory/devices/registeredUsers/read`	Default member	Tier 2
`microsoft.directory/devices/standard/read`	Default member	Tier 2
`microsoft.directory/directoryRoleTemplates/allProperties/read`	Default member	Tier 2
`microsoft.directory/directoryRoles/eligibleMembers/read`	Default member	Tier 2
`microsoft.directory/directoryRoles/members/read`	Default member	Tier 2
`microsoft.directory/directoryRoles/standard/read`	Default member	Tier 2
`microsoft.directory/domains/standard/read`	Default member, Guest user	Tier 2
`microsoft.directory/groups/appRoleAssignments/read`	Default member	Tier 2
`microsoft.directory/groups/createAsOwner`	Extended member	Tier 2
`microsoft.directory/groups/memberOf/read`	Default member	Tier 2
`microsoft.directory/groups/members/read`	Default member	Tier 2
`microsoft.directory/groups/owners/read`	Default member	Tier 2
`microsoft.directory/groups/standard/read`	Default member	Tier 2
`microsoft.directory/multiTenantOrganization/standard/read`	Default member, Guest user	Tier 2
`microsoft.directory/multiTenantOrganization/tenants/standard/read`	Default member, Guest user	Tier 2
`microsoft.directory/oAuth2PermissionGrants/standard/read`	Default member	Tier 2
`microsoft.directory/organization/standard/read`	Default member	Tier 2
`microsoft.directory/policies/owners/read`	Default member	Tier 2
`microsoft.directory/policies/policyAppliedTo/read`	Default member	Tier 2
`microsoft.directory/policies/standard/read`	Default member	Tier 2
`microsoft.directory/roleAssignments/standard/read`	Default member	Tier 2
`microsoft.directory/roleDefinitions/standard/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/appRoleAssignedTo/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/appRoleAssignments/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/authentication/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/createAsOwner`	Extended member	Tier 2
`microsoft.directory/servicePrincipals/memberOf/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/oAuth2PermissionGrants/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/ownedObjects/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/owners/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/policies/read`	Default member	Tier 2
`microsoft.directory/servicePrincipals/standard/read`	Default member	Tier 2
`microsoft.directory/subscribedSkus/standard/read`	Default member	Tier 2
`microsoft.directory/tenantManagement/tenants/create`	Default member	Tier 2
`microsoft.directory/users/activateServicePlan`	Default member	Tier 2
`microsoft.directory/users/appRoleAssignments/read`	Default member	Tier 2
`microsoft.directory/users/deviceForResourceAccount/read`	Default member	Tier 2
`microsoft.directory/users/directReports/read`	Default member	Tier 2
`microsoft.directory/users/inviteGuest`	External Identities	Tier 2
`microsoft.directory/users/licenseDetails/read`	Default member	Tier 2
`microsoft.directory/users/manager/read`	Default member	Tier 2
`microsoft.directory/users/memberOf/read`	Default member	Tier 2
`microsoft.directory/users/oAuth2PermissionGrants/read`	Default member	Tier 2
`microsoft.directory/users/ownedDevices/read`	Default member	Tier 2
`microsoft.directory/users/ownedObjects/read`	Default member	Tier 2
`microsoft.directory/users/photo/read`	Default member	Tier 2
`microsoft.directory/users/registeredDevices/read`	Default member	Tier 2
`microsoft.directory/users/scopedRoleMemberOf/read`	Default member	Tier 2
`microsoft.directory/users/sponsorOf/read`	Default member	Tier 2
`microsoft.directory/users/sponsors/read`	Default member	Tier 2
`microsoft.directory/users/standard/read`	Default member	Tier 2

70 de 70 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "a0b1b346-4d3e-4e8b-98f8-753987be4970"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/a0b1b346-4d3e-4e8b-98f8-753987be4970

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Restricted Guest User

Tier 2Identity

Tenant Creator

Tier 2Identity

Agent ID Administrator

Tier 0Identity