Entra directory roles by role
Groups assigned or eligible for each Entra directory role, including selected assignment and PIM details.
- Tenant: 912e9bd6-236e-46f5-9c0c-b99867e6b99b
- Generated (UTC): 2026-10-14T23:31:24.6459720Z
- Groups with directory-role assignments: 34
- Role assignments: 246
Contents
Application Administrator Authentication Administrator Bitlocker Recovery Key Reader Cloud App Security Administrator Cloud Application Administrator Cloud Device Administrator Directory Readers Edge Administrator Exchange Administrator Exchange Recipient Administrator Global Administrator Global Reader Groups Administrator Hybrid Identity Administrator Intune Administrator LAPS Password Viewer Password Administrator People Administrator Privileged Role Administrator Purview Workload Content Administrator Purview Workload Content Reader Purview Workload Content Writer Reports Reader Security Operator SharePoint Administrator Teams Administrator Teams Reader User Administrator Windows Update Deployment Administrator
Application Administrator (9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3)
- Role definition ID:
9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3
Active assignments
Eligible assignments
Authentication Administrator (c4e39bd9-1100-46d3-8c65-fb160da0071f)
- Role definition ID:
c4e39bd9-1100-46d3-8c65-fb160da0071f
Active assignments
Eligible assignments
Bitlocker Recovery Key Reader (bac39289-5510-4b84-a6a6-b2b0ce2e452d)
- Role definition ID:
bac39289-5510-4b84-a6a6-b2b0ce2e452d
Active assignments
Cloud App Security Administrator (892c5842-a9a6-463a-8041-72aa08ca3cf6)
- Role definition ID:
892c5842-a9a6-463a-8041-72aa08ca3cf6
Active assignments
Cloud Application Administrator (158c047a-c907-4556-b7ef-446551a6b5f7)
- Role definition ID:
158c047a-c907-4556-b7ef-446551a6b5f7
Active assignments
Eligible assignments
Cloud Device Administrator (7698a772-787b-4ac8-901f-60d6b08affd2)
- Role definition ID:
7698a772-787b-4ac8-901f-60d6b08affd2
Active assignments
Directory Readers (88d8e3e3-8f55-4a1e-953a-9b9898b8876b)
- Role definition ID:
88d8e3e3-8f55-4a1e-953a-9b9898b8876b
Active assignments
Edge Administrator (3f1acade-1e04-4fbc-9b69-f0302cd84aef)
- Role definition ID:
3f1acade-1e04-4fbc-9b69-f0302cd84aef
Eligible assignments
Exchange Administrator (29232cdf-9323-42fd-ade2-1d097af3e4de)
- Role definition ID:
29232cdf-9323-42fd-ade2-1d097af3e4de
Active assignments
Exchange Recipient Administrator (31392ffb-586c-42d1-9346-e59415a2cc4e)
- Role definition ID:
31392ffb-586c-42d1-9346-e59415a2cc4e
Eligible assignments
Global Administrator (62e90394-69f5-4237-9190-012177145e10)
- Role definition ID:
62e90394-69f5-4237-9190-012177145e10
Active assignments
Global Reader (f2ef992c-3afb-46b9-b7cf-a126ee74c451)
- Role definition ID:
f2ef992c-3afb-46b9-b7cf-a126ee74c451
Active assignments
Groups Administrator (fdd7a751-b60b-444a-984c-02652fe8fa1c)
- Role definition ID:
fdd7a751-b60b-444a-984c-02652fe8fa1c
Active assignments
Eligible assignments
Hybrid Identity Administrator (8ac3fc64-6eca-42ea-9e69-59f4c7b60eb2)
- Role definition ID:
8ac3fc64-6eca-42ea-9e69-59f4c7b60eb2
Eligible assignments
Intune Administrator (3a2c62db-5318-420d-8d74-23affee5d9d5)
- Role definition ID:
3a2c62db-5318-420d-8d74-23affee5d9d5
Eligible assignments
LAPS Password Viewer (8aca6186-5a5d-4174-bed0-220ad708e40d)
- Role definition ID:
8aca6186-5a5d-4174-bed0-220ad708e40d
Active assignments
Password Administrator (966707d0-3269-4727-9be2-8c3a10f19b9d)
- Role definition ID:
966707d0-3269-4727-9be2-8c3a10f19b9d
Eligible assignments
People Administrator (024906de-61e5-49c8-8572-40335f1e0e10)
- Role definition ID:
024906de-61e5-49c8-8572-40335f1e0e10
Active assignments
Privileged Role Administrator (e8611ab8-c189-46e8-94e1-60213ab1f814)
- Role definition ID:
e8611ab8-c189-46e8-94e1-60213ab1f814
Eligible assignments
Purview Workload Content Administrator (3f04f91a-4ad7-4bd3-bcfa-49882ea1a88a)
- Role definition ID:
3f04f91a-4ad7-4bd3-bcfa-49882ea1a88a
Eligible assignments
Purview Workload Content Reader (e07494ad-1654-4dd2-922e-6f81a71bf00f)
- Role definition ID:
e07494ad-1654-4dd2-922e-6f81a71bf00f
Active assignments
Purview Workload Content Writer (02d5655b-c1cf-4e5f-98da-5fb919085bf6)
- Role definition ID:
02d5655b-c1cf-4e5f-98da-5fb919085bf6
Eligible assignments
Reports Reader (4a5d8f65-41da-4de4-8968-e035b65339cf)
- Role definition ID:
4a5d8f65-41da-4de4-8968-e035b65339cf
Active assignments
Security Operator (5f2222b1-57c3-48ba-8ad5-d4759f1fde6f)
- Role definition ID:
5f2222b1-57c3-48ba-8ad5-d4759f1fde6f
Active assignments
Eligible assignments
SharePoint Administrator (f28a1f50-f6e7-4571-818b-6a12f2af6b6c)
- Role definition ID:
f28a1f50-f6e7-4571-818b-6a12f2af6b6c
Active assignments
Eligible assignments
Teams Administrator (69091246-20e8-4a56-aa4d-066075b2a7a8)
- Role definition ID:
69091246-20e8-4a56-aa4d-066075b2a7a8
Active assignments
Teams Reader (1076ac91-f3d9-41a7-a339-dcdf5f480acc)
- Role definition ID:
1076ac91-f3d9-41a7-a339-dcdf5f480acc
Active assignments
User Administrator (fe930be7-5e62-47db-91af-98c3a49a38b1)
- Role definition ID:
fe930be7-5e62-47db-91af-98c3a49a38b1
Active assignments
Eligible assignments
Windows Update Deployment Administrator (32696413-001a-46ae-978c-ce0f6b3620d2)
- Role definition ID:
32696413-001a-46ae-978c-ce0f6b3620d2