Resource Policy Evaluator
Enabled
Description
Users in this role can evaluate resource policies to understand their impact and outcome. This role does not grant any read or write access to the policy definitions or assignments themselves, making it ideal for developers, testers, and automated tools that need to perform policy validation as part of a development or CI/CD pipeline.
Directory Actions1
| Action | Condition |
|---|---|
microsoft.directory/resourcePolicy/evaluatePolicy | null |