Agent ID Administrator | MS Admin Roles

← All Roles

Compare with previous version (v3)

Versionv4

Last Updated2026-06-27

Categoryidentity

Assignment Modeallowed

Built-inYes

Template IDdb506228-d27e-4b7d-95e5-295956d6615f

Attack path

Agent ID Administrator can manage agent identities and their ownership. If ownership permissions or scopes extend to a service principal with privileged Microsoft Graph access, an attacker could make a controlled identity an owner and then add credentials to that service principal. Authenticating as the workload would grant the attacker its existing permissions and could lead to tenant-wide access. The route depends on a privileged service principal falling within the role's effective management scope, so agent identities and ownership changes should be monitored closely.

Description

Manage all aspects of agents in a tenant including identity lifecycle operations for agent blueprints, agent identity blueprint principals, agent identities, and agentic users.

Details

Assign the Agent ID Administrator role to users who need to do the following tasks:

Manage the full lifecycle of agent identities, agent identity blueprint principals, agent identity blueprints, and agent users in a tenant
Permanently delete and restore deleted agent identities, agent identity blueprint principals, agent identity blueprints, and agent users
Manage licenses, invalidate refresh tokens, and revoke sign-in sessions for agent users
Read all properties of audit logs and sign-in reports
Read standard properties of organization, policies, external user profiles, hidden group members, and bulk jobs for users
Create Microsoft 365 groups as owner
Read and configure Azure and Microsoft 365 service health and support tickets
Create and manage Azure and Microsoft 365 service health and support tickets

Directory Actions66

Action	Condition
`microsoft.azure.serviceHealth/allEntities/allTasks`	`null`
`microsoft.azure.supportTickets/allEntities/allTasks`	`null`
`microsoft.directory/agentIdentities/allProperties/read`	`null`
`microsoft.directory/agentIdentities/appRoleAssignedTo/update`	`null`
`microsoft.directory/agentIdentities/authentication/update`	`null`
`microsoft.directory/agentIdentities/basic/update`	`null`
`microsoft.directory/agentIdentities/create`	`null`
`microsoft.directory/agentIdentities/delete`	`null`
`microsoft.directory/agentIdentities/disable`	`null`
`microsoft.directory/agentIdentities/enable`	`null`
`microsoft.directory/agentIdentities/owners/update`	`null`
`microsoft.directory/agentIdentities/tag/update`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/allProperties/read`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/appRoleAssignedTo/update`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/authentication/update`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/basic/update`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/create`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/delete`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/disable`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/enable`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/owners/update`	`null`
`microsoft.directory/agentIdentityBlueprintPrincipals/tag/update`	`null`
`microsoft.directory/agentIdentityBlueprints/allProperties/read`	`null`
`microsoft.directory/agentIdentityBlueprints/allProperties/update`	`null`
`microsoft.directory/agentIdentityBlueprints/appRoles/update`	`null`
`microsoft.directory/agentIdentityBlueprints/audience/update`	`null`
`microsoft.directory/agentIdentityBlueprints/authentication/update`	`null`
`microsoft.directory/agentIdentityBlueprints/basic/update`	`null`
`microsoft.directory/agentIdentityBlueprints/create`	`null`
`microsoft.directory/agentIdentityBlueprints/credentials/update`	`null`
`microsoft.directory/agentIdentityBlueprints/delete`	`null`
`microsoft.directory/agentIdentityBlueprints/owners/update`	`null`
`microsoft.directory/agentIdentityBlueprints/permissions/update`	`null`
`microsoft.directory/agentIdentityBlueprints/tag/update`	`null`
`microsoft.directory/agentUsers/assignLicense`	`null`
`microsoft.directory/agentUsers/basic/update`	`null`
`microsoft.directory/agentUsers/create`	`null`
`microsoft.directory/agentUsers/delete`	`null`
`microsoft.directory/agentUsers/disable`	`null`
`microsoft.directory/agentUsers/enable`	`null`
`microsoft.directory/agentUsers/invalidateAllRefreshTokens`	`null`
`microsoft.directory/agentUsers/lifeCycleInfo/read`	`null`
`microsoft.directory/agentUsers/lifeCycleInfo/update`	`null`
`microsoft.directory/agentUsers/manager/update`	`null`
`microsoft.directory/agentUsers/photo/update`	`null`
`microsoft.directory/agentUsers/reprocessLicenseAssignment`	`null`
`microsoft.directory/agentUsers/restore`	`null`
`microsoft.directory/agentUsers/revokeSignInSessions`	`null`
`microsoft.directory/agentUsers/sponsors/update`	`null`
`microsoft.directory/agentUsers/usageLocation/update`	`null`
`microsoft.directory/agentUsers/userPrincipalName/update`	`null`
`microsoft.directory/auditLogs/allProperties/read`	`null`
`microsoft.directory/deletedItems.agentIdentities/delete`	`null`
`microsoft.directory/deletedItems.agentIdentities/restore`	`null`
`microsoft.directory/deletedItems.agentIdentityBlueprintPrincipals/delete`	`null`
`microsoft.directory/deletedItems.agentIdentityBlueprintPrincipals/restore`	`null`
`microsoft.directory/deletedItems.agentIdentityBlueprints/delete`	`null`
`microsoft.directory/deletedItems.agentIdentityBlueprints/restore`	`null`
`microsoft.directory/externalUserProfiles/standard/read`	`null`
`microsoft.directory/groups/hiddenMembers/read`	`null`
`microsoft.directory/groups.unified/createAsOwner`	`null`
`microsoft.directory/organization/standard/read`	`null`
`microsoft.directory/policies/standard/read`	`null`
`microsoft.directory/signInReports/allProperties/read`	`null`
`microsoft.office365.serviceHealth/allEntities/allTasks`	`null`
`microsoft.office365.supportTickets/allEntities/allTasks`	`null`

Graph API Permissions43

Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.

AgentIdentity.Create.All
AgentIdentity.DeleteRestore.All
AgentIdentity.EnableDisable.All
AgentIdentity.Read.All
AgentIdentity.ReadWrite.All
AgentIdentityBlueprint.AddRemoveCreds.All
AgentIdentityBlueprint.Create
AgentIdentityBlueprint.DeleteRestore.All
AgentIdentityBlueprint.Read.All
AgentIdentityBlueprint.ReadWrite.All
AgentIdentityBlueprintPrincipal.Create
AgentIdentityBlueprintPrincipal.DeleteRestore.All
AgentIdentityBlueprintPrincipal.EnableDisable.All
AgentIdentityBlueprintPrincipal.Read.All
AgentIdentityBlueprintPrincipal.ReadWrite.All
AgentIdUser.ReadWrite.All
AgentIdUser.ReadWrite.IdentityParentedBy
AuditLog.Read.All
AuditLogsQuery-Entra.Read.All
AuditLogsQuery.Read.All
ChangeManagement.Read.All
ExternalUserProfile.Read.All
Group.Read.All
Group.ReadWrite.All
GroupMember.Read.All
GroupMember.ReadWrite.All
GroupSettings.Read.All
Organization.Read.All
PendingExternalUserProfile.Read.All
Policy.Read.All
Policy.Read.AuthenticationMethod
Policy.Read.B2BManagementPolicy
Policy.Read.ConditionalAccess
Policy.Read.DeviceConfiguration
Policy.Read.IdentityProtection
Policy.Read.PermissionGrant
ServiceActivity-Exchange.Read.All
ServiceActivity-Microsoft365Web.Read.All
ServiceActivity-OneDrive.Read.All
ServiceActivity-Teams.Read.All
ServiceHealth.Read.All
ServiceMessage.Read.All
ServiceMessageViewpoint.Write

ShareLinkedIn X Reddit Facebook WhatsApp