← All Roles

Microsoft Graph Data Connect Administrator

Enabled
Versionv1
Date Added2026-06-21
Categorycollaboration
Assignment Modeallowed
Built-inYes
Template IDee67aa9c-e510-4759-b906-227085a7fd4d

Description

Manage aspects of Microsoft Graph Data Connect service in a tenant.

Details

Assign the Microsoft Graph Data Connect Administrator role to users who need to do the following tasks:

  • Access the full set of administrative capabilities of Microsoft Graph Data Connect
  • Manage Microsoft Graph Data Connect settings in a tenant
  • Enable or disable the Microsoft Graph Data Connect service
  • Configure dataset workload selections in Microsoft Graph Data Connect
  • Configure cross-tenant data movement settings in Microsoft Graph Data Connect
  • View, approve, or deny application authorization requests for Microsoft Graph Data Connect
  • View, create, update, or delete application registrations for Microsoft Graph Data Connect

Directory Actions7

  • microsoft.azure.serviceHealth/allEntities/allTasks
  • microsoft.azure.supportTickets/allEntities/allTasks
  • microsoft.graph.dataConnect/allEntities/allProperties/allTasks
  • microsoft.office365.messageCenter/messages/read
  • microsoft.office365.serviceHealth/allEntities/allTasks
  • microsoft.office365.supportTickets/allEntities/allTasks
  • microsoft.office365.webPortal/allEntities/standard/read

Graph API Permissions19

Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.

  • ChangeManagement.Read.All
  • Directory.Read.All
  • IndustryData-DataConnector.Read.All
  • IndustryData-DataConnector.ReadWrite.All
  • IndustryData-InboundFlow.Read.All
  • IndustryData-InboundFlow.ReadWrite.All
  • IndustryData-OutboundFlow.Read.All
  • IndustryData-OutboundFlow.ReadWrite.All
  • IndustryData-ReferenceDefinition.Read.All
  • IndustryData-SourceSystem.Read.All
  • IndustryData-SourceSystem.ReadWrite.All
  • IndustryData.ReadBasic.All
  • ServiceActivity-Exchange.Read.All
  • ServiceActivity-Microsoft365Web.Read.All
  • ServiceActivity-OneDrive.Read.All
  • ServiceActivity-Teams.Read.All
  • ServiceHealth.Read.All
  • ServiceMessage.Read.All
  • ServiceMessageViewpoint.Write