IT Services Reference
Powered by

Entra role-assignable groups

Directory roles assigned or eligible to each Entra group, with selected PIM activation-policy settings.
  • Tenant: 912e9bd6-236e-46f5-9c0c-b99867e6b99b
  • Generated (UTC): 2026-10-14T23:31:24.6459720Z
  • Groups with directory-role assignments: 34

Lists directory roles assigned or eligible to each group and the selected PIM activation-policy settings. Group membership schedules are not collected.

Contents

  • BCCC: Role - IT Technician
  • BRICC: Role - IT Technician
  • CCM: IT Administrators
  • CCM: IT Technicians
  • CCM: K12 Solutions Staff
  • CCM: Role - Cloud App Administrator
  • CCM: Role - Entra Application Administrator
  • CCM: Role - Exchange Administrator
  • CCM: Role - Global Administrator
  • CCM: Role - Microsoft Application Administrator
  • CCM: Role - People Administrator
  • CCM: Role - Purview Workload
  • CCM: Role - SharePoint Administrator
  • CCM: Role - Teams Administrator
  • CCM: Role - Teams Configuration Reader
  • CCMCO: Role - IT Technician
  • CHICC: Role - IT Technician
  • CORCC: Role - IT Technician
  • DALCC: Role - IT Technician
  • DUNCC: Role - IT Technician
  • ENDCC: Role - IT Technician
  • ENDCC: Student Password Administrators
  • GROCC: DE Password Administrators
  • GROCC: Role - IT Technician
  • HOPCC: Role - IT Technician
  • LIVCC: Role - IT Technician
  • RIVCC: Password Administrator
  • RIVCC: Role - IT Technician
  • SEACC: Role - IT Technician
  • STAMC: Role - IT Technician
  • TLCC: Role - IT Technician
  • WARCC: Role - IT Technician
  • WARCC: Student Password Reset Users
  • WHICC: Role - IT Technician

Group a0fa904b-20f2-43e7-b2d6-f9defb0526d6

  • Display name: BCCC: Role - IT Technician
  • Group ID: a0fa904b-20f2-43e7-b2d6-f9defb0526d6
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct BCCC: Students
User Administrator Active Direct BCCC: Staff
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct BCCC: Students
Cloud Device Administrator Active Direct BCCC: Devices
User Administrator Active Direct BCCC: Other
LAPS Password Viewer Active Direct BCCC: Devices
Bitlocker Recovery Key Reader Active Direct BCCC: Devices
Groups Administrator Active Direct BCCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct BCCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group a77e405f-7718-4af1-9421-495c6bedb6db

  • Display name: BRICC: Role - IT Technician
  • Group ID: a77e405f-7718-4af1-9421-495c6bedb6db
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct BRICC: Students
User Administrator Active Direct BRICC: Staff
Authentication Administrator Active Direct BRICC: Students
Cloud Device Administrator Active Direct BRICC: Devices
Groups Administrator Active Direct BRICC: Groups
User Administrator Active Direct BRICC: Other
LAPS Password Viewer Active Direct BRICC: Devices
Bitlocker Recovery Key Reader Active Direct BRICC: Devices
Reports Reader Active Direct Tenant-wide

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct BRICC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 72614055-3486-47f0-b44e-7f46803212fe

  • Display name: CCM: IT Administrators
  • Group ID: 72614055-3486-47f0-b44e-7f46803212fe
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

None found.

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Application Administrator Eligible Direct Tenant-wide No expiration — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
— PT8H Justification False —
— PT8H Justification False —

Group 672e071c-989a-426c-9827-6d0a28b5e5f1

  • Display name: CCM: IT Technicians
  • Group ID: 672e071c-989a-426c-9827-6d0a28b5e5f1
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Windows Update Deployment Administrator Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
— PT8H Justification False —
— PT8H Justification False —

Group 6d082ca8-8b31-41eb-b6da-c70b91d14a5a

  • Display name: CCM: K12 Solutions Staff
  • Group ID: 6d082ca8-8b31-41eb-b6da-c70b91d14a5a
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Directory Readers Active Direct Tenant-wide

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
User Administrator Eligible Direct Tenant-wide No expiration — MultiFactorAuthentication, Justification False —
Cloud Application Administrator Eligible Direct Tenant-wide PT8H — MultiFactorAuthentication, Justification False —
Hybrid Identity Administrator Eligible Direct Tenant-wide No expiration — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
— PT8H Justification False —
— PT8H Justification False —

Group 6d459452-db6d-4028-a0d8-fcee3bcd3b3a

  • Display name: CCM: Role - Cloud App Administrator
  • Group ID: 6d459452-db6d-4028-a0d8-fcee3bcd3b3a
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Cloud App Security Administrator Active Direct Tenant-wide
Cloud Application Administrator Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration Ticketing False —
— PT8H Justification False —

Group f918b613-fa2e-4b19-860e-67dac52f792c

  • Display name: CCM: Role - Entra Application Administrator
  • Group ID: f918b613-fa2e-4b19-860e-67dac52f792c
  • Description: Manages Entra App Registrations and Enterprise Apps
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Application Administrator Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration Ticketing False —
— PT8H Justification False —

Group 9e1789f3-40f1-47c4-9bcf-8a0ba63000fa

  • Display name: CCM: Role - Exchange Administrator
  • Group ID: 9e1789f3-40f1-47c4-9bcf-8a0ba63000fa
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Exchange Administrator Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
— PT8H Justification False —
— PT8H Justification False —

Group a6b2d667-c2b6-4c7b-a036-7ad485fcf987

  • Display name: CCM: Role - Global Administrator
  • Group ID: a6b2d667-c2b6-4c7b-a036-7ad485fcf987
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Global Administrator Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration Justification True {"ApprovalMode":"SingleStage","ApprovalStages":[{"ApprovalStageTimeOutInDays":1,"IsApproverJustificationRequired":true,"IsEscalationEnabled":false,"EscalationTimeInMinutes":0,"PrimaryApprovers":[{"@odata.type":"#microsoft.graph.singleUser","userId":"f5ddaa34-f614-4fe7-979d-24caec7bc452","description":"Joshua Lyndon"},{"@odata.type":"#microsoft.graph.singleUser","userId":"fd64403b-ae9f-43e2-b5e8-bffe5c057a26","description":"Jason Treadwell"},{"@odata.type":"#microsoft.graph.singleUser","userId":"5b3d76ef-aa28-436b-b8ee-4e2160593b54","description":"Cameron Weir"}],"EscalationApprovers":[]}]}
— PT8H Justification False —

Group 4d4b888e-2c89-49a0-a655-e3b5636ed920

  • Display name: CCM: Role - Microsoft Application Administrator
  • Group ID: 4d4b888e-2c89-49a0-a655-e3b5636ed920
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

None found.

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
SharePoint Administrator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located — True {"ApprovalMode":"SingleStage","ApprovalStages":[{"ApprovalStageTimeOutInDays":1,"IsApproverJustificationRequired":true,"IsEscalationEnabled":false,"EscalationTimeInMinutes":0,"PrimaryApprovers":[{"@odata.type":"#microsoft.graph.singleUser","userId":"5b3d76ef-aa28-436b-b8ee-4e2160593b54","description":"Cameron Weir"},{"@odata.type":"#microsoft.graph.singleUser","userId":"fd64403b-ae9f-43e2-b5e8-bffe5c057a26","description":"Jason Treadwell"},{"@odata.type":"#microsoft.graph.singleUser","userId":"f5ddaa34-f614-4fe7-979d-24caec7bc452","description":"Joshua Lyndon"}],"EscalationApprovers":[]}]}
Edge Administrator Eligible Direct Tenant-wide No expiration — Ticketing False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration Ticketing False —
— PT8H Justification False —

Group 2b0b1499-8dcb-4119-946d-417005a83841

  • Display name: CCM: Role - People Administrator
  • Group ID: 2b0b1499-8dcb-4119-946d-417005a83841
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
People Administrator Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 9458c03e-5f03-44c5-8f60-a9c5935cbb14

  • Display name: CCM: Role - Purview Workload
  • Group ID: 9458c03e-5f03-44c5-8f60-a9c5935cbb14
  • Description: Read by default; activate Write or Administrator as required.
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Purview Workload Content Reader Active Direct Tenant-wide

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Purview Workload Content Writer Eligible Direct Tenant-wide PT8H — Justification False —
Purview Workload Content Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration Ticketing False —
— PT8H Justification False —

Group 9df37d56-3961-4917-8d77-98f149ac7f8f

  • Display name: CCM: Role - SharePoint Administrator
  • Group ID: 9df37d56-3961-4917-8d77-98f149ac7f8f
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
SharePoint Administrator Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration Ticketing False —
— PT8H Justification False —

Group 3ac3b306-871b-4511-917e-05f0fc41c781

  • Display name: CCM: Role - Teams Administrator
  • Group ID: 3ac3b306-871b-4511-917e-05f0fc41c781
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Teams Administrator Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration Ticketing False —
— PT8H Justification False —

Group 0ee1c984-5ba2-4adc-8cc9-cd631dd81b3a

  • Display name: CCM: Role - Teams Configuration Reader
  • Group ID: 0ee1c984-5ba2-4adc-8cc9-cd631dd81b3a
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
Teams Reader Active Direct Tenant-wide

Directory roles — eligible

None found.

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration Ticketing False —
— PT8H Justification False —

Group bfd2597c-898f-43db-9d7f-4f3d82aab62f

  • Display name: CCMCO: Role - IT Technician
  • Group ID: bfd2597c-898f-43db-9d7f-4f3d82aab62f
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct Tenant-wide
Reports Reader Active Direct Tenant-wide
Cloud Device Administrator Active Direct Tenant-wide
Security Operator Active Direct Tenant-wide
Global Reader Active Direct Tenant-wide
Groups Administrator Active Direct Tenant-wide
LAPS Password Viewer Active Direct Tenant-wide
Bitlocker Recovery Key Reader Active Direct Tenant-wide

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Privileged Role Administrator Eligible Direct Tenant-wide PT8H — MultiFactorAuthentication, Justification False —
Intune Administrator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Authentication Administrator Eligible Direct Tenant-wide No expiration — MultiFactorAuthentication, Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Passkey + Compliant + School Located No expiration — False —
— PT8H Justification False —

Group afd021c1-c7d3-482e-a6b9-bf691762353e

  • Display name: CHICC: Role - IT Technician
  • Group ID: afd021c1-c7d3-482e-a6b9-bf691762353e
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct CHICC: Staff
User Administrator Active Direct CHICC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct CHICC: Students
User Administrator Active Direct CHICC: Other
Cloud Device Administrator Active Direct CHICC: Devices
LAPS Password Viewer Active Direct CHICC: Devices
Bitlocker Recovery Key Reader Active Direct CHICC: Devices
Groups Administrator Active Direct CHICC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct CHICC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group ebec12ba-a41d-432f-bcad-87f7b977bbb4

  • Display name: CORCC: Role - IT Technician
  • Group ID: ebec12ba-a41d-432f-bcad-87f7b977bbb4
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct CORCC: Staff
User Administrator Active Direct CORCC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct CORCC: Students
Cloud Device Administrator Active Direct CORCC: Devices
User Administrator Active Direct CORCC: Other
LAPS Password Viewer Active Direct CORCC: Devices
Bitlocker Recovery Key Reader Active Direct CORCC: Devices
Groups Administrator Active Direct CORCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct CORCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 9fa8672d-a469-43dd-a772-8fa674030af9

  • Display name: DALCC: Role - IT Technician
  • Group ID: 9fa8672d-a469-43dd-a772-8fa674030af9
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct DALCC: Staff
User Administrator Active Direct DALCC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct DALCC: Students
Cloud Device Administrator Active Direct DALCC: Devices
User Administrator Active Direct DALCC: Other
LAPS Password Viewer Active Direct DALCC: Devices
Bitlocker Recovery Key Reader Active Direct DALCC: Devices
Groups Administrator Active Direct DALCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct DALCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group effd11bc-0376-4b4c-8037-016898b7ce0a

  • Display name: DUNCC: Role - IT Technician
  • Group ID: effd11bc-0376-4b4c-8037-016898b7ce0a
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct DUNCC: Staff
User Administrator Active Direct DUNCC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct DUNCC: Students
Cloud Device Administrator Active Direct DUNCC: Devices
User Administrator Active Direct DUNCC: Other
LAPS Password Viewer Active Direct DUNCC: Devices
Bitlocker Recovery Key Reader Active Direct DUNCC: Devices
Groups Administrator Active Direct DUNCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct DUNCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 1fffa561-d165-435d-990e-c247f23a7a09

  • Display name: ENDCC: Role - IT Technician
  • Group ID: 1fffa561-d165-435d-990e-c247f23a7a09
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct ENDCC: Staff
User Administrator Active Direct ENDCC: Students
Reports Reader Active Direct Tenant-wide
Cloud Device Administrator Active Direct ENDCC: Devices
Authentication Administrator Active Direct ENDCC: Students
User Administrator Active Direct ENDCC: Other
LAPS Password Viewer Active Direct ENDCC: Devices
Bitlocker Recovery Key Reader Active Direct ENDCC: Devices
Groups Administrator Active Direct ENDCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct ENDCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 5fa4b0a9-7faa-4a50-8391-ce62061e567a

  • Display name: ENDCC: Student Password Administrators
  • Group ID: 5fa4b0a9-7faa-4a50-8391-ce62061e567a
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

None found.

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Password Administrator Eligible Direct ENDCC: Students No expiration — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
— PT8H Justification False —
— PT8H Justification False —

Group 2f947a04-8d2b-43b5-9ea3-e26432667fba

  • Display name: GROCC: DE Password Administrators
  • Group ID: 2f947a04-8d2b-43b5-9ea3-e26432667fba
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

None found.

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Password Administrator Eligible Direct GROCC: DE Students No expiration — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
— PT8H Justification False —
— PT8H Justification False —

Group f0cc2142-8342-4e91-be46-2039754b3302

  • Display name: GROCC: Role - IT Technician
  • Group ID: f0cc2142-8342-4e91-be46-2039754b3302
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct GROCC: Day School Students
User Administrator Active Direct GROCC: DE Students
Reports Reader Active Direct Tenant-wide
User Administrator Active Direct GROCC: Staff
User Administrator Active Direct GROCC: Other
Cloud Device Administrator Active Direct GROCC: Devices
Authentication Administrator Active Direct GROCC: Day School Students
Authentication Administrator Active Direct GROCC: DE Students
LAPS Password Viewer Active Direct GROCC: Devices
Bitlocker Recovery Key Reader Active Direct GROCC: Devices
Groups Administrator Active Direct GROCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct GROCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 6b1e58c3-dc43-4ea3-9ad0-92ffebfb04c5

  • Display name: HOPCC: Role - IT Technician
  • Group ID: 6b1e58c3-dc43-4ea3-9ad0-92ffebfb04c5
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct HOPCC: Staff
User Administrator Active Direct HOPCC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct HOPCC: Students
Cloud Device Administrator Active Direct HOPCC: Devices
User Administrator Active Direct HOPCC: Other
LAPS Password Viewer Active Direct HOPCC: Devices
Bitlocker Recovery Key Reader Active Direct HOPCC: Devices
Groups Administrator Active Direct HOPCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct HOPCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group f42ab487-0032-4ae4-bbfd-d77b7241888e

  • Display name: LIVCC: Role - IT Technician
  • Group ID: f42ab487-0032-4ae4-bbfd-d77b7241888e
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct LIVCC: Staff
User Administrator Active Direct LIVCC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct LIVCC: Students
Cloud Device Administrator Active Direct LIVCC: Devices
User Administrator Active Direct LIVCC: Other
LAPS Password Viewer Active Direct LIVCC: Devices
Bitlocker Recovery Key Reader Active Direct LIVCC: Devices
Groups Administrator Active Direct LIVCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct LIVCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 7a41b9fd-ef01-4a56-bf89-e358909834c1

  • Display name: RIVCC: Password Administrator
  • Group ID: 7a41b9fd-ef01-4a56-bf89-e358909834c1
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

None found.

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Password Administrator Eligible Direct RIVCC: Students No expiration — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
— PT8H Justification False —
— PT8H Justification False —

Group c7dd831a-4725-4552-a928-7eb3a01712a3

  • Display name: RIVCC: Role - IT Technician
  • Group ID: c7dd831a-4725-4552-a928-7eb3a01712a3
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct RIVCC: Students
User Administrator Active Direct RIVCC: Staff
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct RIVCC: Students
Cloud Device Administrator Active Direct RIVCC: Devices
User Administrator Active Direct RIVCC: Other
LAPS Password Viewer Active Direct RIVCC: Devices
Bitlocker Recovery Key Reader Active Direct RIVCC: Devices
Groups Administrator Active Direct RIVCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct RIVCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group fae05a52-3602-41ea-98e0-14b493fe5fa7

  • Display name: SEACC: Role - IT Technician
  • Group ID: fae05a52-3602-41ea-98e0-14b493fe5fa7
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct SEACC: Staff
User Administrator Active Direct SEACC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct SEACC: Students
Cloud Device Administrator Active Direct SEACC: Devices
User Administrator Active Direct SEACC: Other
LAPS Password Viewer Active Direct SEACC: Devices
Bitlocker Recovery Key Reader Active Direct SEACC: Devices
Groups Administrator Active Direct SEACC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct SEACC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 8dd03cf6-25cc-42ab-8c8b-14b73504f24a

  • Display name: STAMC: Role - IT Technician
  • Group ID: 8dd03cf6-25cc-42ab-8c8b-14b73504f24a
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct STAMC: Staff
User Administrator Active Direct STAMC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct STAMC: Students
Cloud Device Administrator Active Direct STAMC: Devices
User Administrator Active Direct STAMC: Other
LAPS Password Viewer Active Direct STAMC: Devices
Bitlocker Recovery Key Reader Active Direct STAMC: Devices
Groups Administrator Active Direct STAMC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct STAMC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group de8ae7db-0cf5-4117-980c-1b379d6401b1

  • Display name: TLCC: Role - IT Technician
  • Group ID: de8ae7db-0cf5-4117-980c-1b379d6401b1
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct TLCC: Students
User Administrator Active Direct TLCC: Staff
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct TLCC: Students
Cloud Device Administrator Active Direct TLCC: Devices
User Administrator Active Direct TLCC: Other
LAPS Password Viewer Active Direct TLCC: Devices
Bitlocker Recovery Key Reader Active Direct TLCC: Devices
Groups Administrator Active Direct TLCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct TLCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 5f2419b7-fba0-4d41-871c-a9ecb906af06

  • Display name: WARCC: Role - IT Technician
  • Group ID: 5f2419b7-fba0-4d41-871c-a9ecb906af06
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct WARCC: Staff
User Administrator Active Direct WARCC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct WARCC: Students
Cloud Device Administrator Active Direct WARCC: Devices
User Administrator Active Direct WARCC: Other
LAPS Password Viewer Active Direct WARCC: Devices
Bitlocker Recovery Key Reader Active Direct WARCC: Devices
Groups Administrator Active Direct WARCC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct WARCC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —

Group 889443b4-c627-45d2-87bc-2960bde2b915

  • Display name: WARCC: Student Password Reset Users
  • Group ID: 889443b4-c627-45d2-87bc-2960bde2b915
  • Description: Members can elevate to the Password Administrator role for the WARCC: Students AU
  • Mail enabled / security enabled: False / True

Directory roles — active

None found.

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Password Administrator Eligible Direct WARCC: Students No expiration — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
— PT8H Justification False —
— PT8H Justification False —

Group b5d4d393-f765-4f30-b686-f0b608e60368

  • Display name: WHICC: Role - IT Technician
  • Group ID: b5d4d393-f765-4f30-b686-f0b608e60368
  • Description: —
  • Mail enabled / security enabled: False / True

Directory roles — active

RoleName AssignmentType MemberType ScopeDisplayName
User Administrator Active Direct WHICC: Staff
User Administrator Active Direct WHICC: Students
Reports Reader Active Direct Tenant-wide
Authentication Administrator Active Direct WHICC: Students
User Administrator Active Direct WHICC: Other
Cloud Device Administrator Active Direct WHICC: Devices
LAPS Password Viewer Active Direct WHICC: Devices
Bitlocker Recovery Key Reader Active Direct WHICC: Devices
Groups Administrator Active Direct WHICC: Groups

Directory roles — eligible

RoleName AssignmentType MemberType ScopeDisplayName MaximumActivationDuration AuthenticationContext RequiredInformation ApprovalRequired ApprovalSettings
Authentication Administrator Eligible Direct WHICC: Staff No expiration — MultiFactorAuthentication, Justification False —
Security Operator Eligible Direct Tenant-wide No expiration Passkey + Compliant + School Located Ticketing False —
Groups Administrator Eligible Direct Tenant-wide No expiration — Justification False —
Exchange Recipient Administrator Eligible Direct Tenant-wide PT8H — Justification False —

Eligible group-membership activation policy settings

AuthenticationContext MaximumActivationDuration RequiredInformation ApprovalRequired ApprovalSettings
Compliant + School Located No expiration — False —
— PT8H Justification False —