← All Roles

Permissions Management Administrator

Enabled
Versionv1
Date Added2026-06-21
CategorysecurityAndCompliance
Assignment Modeallowed
Built-inYes
Template IDaf78dc32-cf4d-46f9-ba4e-4428526346b5

Description

Manage all aspects of Entra Permissions Management.

Details

Users with this role can manage all aspects of Entra Permissions Management, when the service is present.

Directory Actions1

  • microsoft.permissionsManagement/allEntities/allProperties/allTasks

Graph API Permissions1

Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.

  • RoleManagement.Read.All