Customer LockBox Access Approver

Description

Can approve Microsoft support requests to access customer organizational data.

Details

User in this role can login to the Office Admin Center and view/approve/reject data access requests.

Directory Actions2

• microsoft.office365.lockbox/allEntities/allTasks
• microsoft.office365.webPortal/allEntities/standard/read

Graph API Permissions1

Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.

• Directory.Read.All