Organizational Data Source Administrator
Enabled
Description
Set up and manage the ingestion of organizational data into Microsoft 365.
Details
Assign the Organizational Data Source Administrator role to users who need to do the following tasks:
- Manage settings related to ingesting and managing organizational data for Microsoft 365 and Microsoft Viva applications
- Upload, update, and delete the ingested organizational data in Microsoft 365 and Microsoft Viva applications
- Export organizational data from the authorized applications
Directory Actions7
microsoft.azure.serviceHealth/allEntities/allTasksmicrosoft.azure.supportTickets/allEntities/allTasksmicrosoft.microsoft365.organizationalData/allEntities/allProperties/allTasksmicrosoft.office365.messageCenter/messages/readmicrosoft.office365.serviceHealth/allEntities/allTasksmicrosoft.office365.supportTickets/allEntities/allTasksmicrosoft.office365.webPortal/allEntities/standard/read
Graph API Permissions17
Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.
ChangeManagement.Read.AllDirectory.Read.AllOrganization.Read.AllOrganization.ReadWrite.AllOrgSettings-Forms.Read.AllOrgSettings-Forms.ReadWrite.AllOrgSettings-Microsoft365Install.Read.AllOrgSettings-Microsoft365Install.ReadWrite.AllOrgSettings-Todo.Read.AllOrgSettings-Todo.ReadWrite.AllServiceActivity-Exchange.Read.AllServiceActivity-Microsoft365Web.Read.AllServiceActivity-OneDrive.Read.AllServiceActivity-Teams.Read.AllServiceHealth.Read.AllServiceMessage.Read.AllServiceMessageViewpoint.Write