← All Roles

Resource Policy Administrator

Enabled
Versionv1
Date Added2026-11-06
CategorysecurityAndCompliance
Assignment Modeallowed
Built-inYes
Template IDc0c46a03-c257-4f91-ab71-3c7e59c89d97

Description

Users in this role have full permissions to create, read, update, delete, and evaluate resource policies, their assignments, and the tenant-wide resource policy configuration in Microsoft Graph. This role is intended for senior and compliance administrators who are responsible for the entire lifecycle of resource access policies. Assigning this role grants comprehensive control over how resource policies are defined and enforced across the organization.

Details

Users in this role have full permissions to create, read, update, delete, and evaluate resource policies and their assignments in Microsoft Graph. This role is intended for senior and compliance administrators who are responsible for the entire lifecycle of resource policies. Assigning this role grants comprehensive control over how resource policies are defined and enforced across the organization.

Directory Actions12

ActionCondition
microsoft.directory/resourcePolicy/assignments/basic/updatenull
microsoft.directory/resourcePolicy/assignments/createnull
microsoft.directory/resourcePolicy/assignments/deletenull
microsoft.directory/resourcePolicy/assignments/standard/readnull
microsoft.directory/resourcePolicy/configuration/basic/updatenull
microsoft.directory/resourcePolicy/configuration/standard/readnull
microsoft.directory/resourcePolicy/definitions/basic/updatenull
microsoft.directory/resourcePolicy/definitions/createnull
microsoft.directory/resourcePolicy/definitions/deletenull
microsoft.directory/resourcePolicy/definitions/standard/readnull
microsoft.directory/resourcePolicy/evaluateAssignedPoliciesnull
microsoft.directory/resourcePolicy/evaluatePolicynull