Resource Policy Administrator
Description
Users in this role have full permissions to create, read, update, delete, and evaluate resource policies, their assignments, and the tenant-wide resource policy configuration in Microsoft Graph. This role is intended for senior and compliance administrators who are responsible for the entire lifecycle of resource access policies. Assigning this role grants comprehensive control over how resource policies are defined and enforced across the organization.
Details
Users in this role have full permissions to create, read, update, delete, and evaluate resource policies and their assignments in Microsoft Graph. This role is intended for senior and compliance administrators who are responsible for the entire lifecycle of resource policies. Assigning this role grants comprehensive control over how resource policies are defined and enforced across the organization.
Directory Actions12
| Action | Condition |
|---|---|
microsoft.directory/resourcePolicy/assignments/basic/update | null |
microsoft.directory/resourcePolicy/assignments/create | null |
microsoft.directory/resourcePolicy/assignments/delete | null |
microsoft.directory/resourcePolicy/assignments/standard/read | null |
microsoft.directory/resourcePolicy/configuration/basic/update | null |
microsoft.directory/resourcePolicy/configuration/standard/read | null |
microsoft.directory/resourcePolicy/definitions/basic/update | null |
microsoft.directory/resourcePolicy/definitions/create | null |
microsoft.directory/resourcePolicy/definitions/delete | null |
microsoft.directory/resourcePolicy/definitions/standard/read | null |
microsoft.directory/resourcePolicy/evaluateAssignedPolicies | null |
microsoft.directory/resourcePolicy/evaluatePolicy | null |