Resource Policy Reader
Enabled
Description
Users in this role have read-only access to resource policy definitions, assignments, and the tenant-wide resource policy configuration in Microsoft Graph. They can also evaluate policies to understand their impact, making this role ideal for audit, compliance, and support personnel who need to validate and troubleshoot policies without the ability to modify them.
Details
Users in this role have read-only access to resource policy definitions and assignments in Microsoft Graph. They can also evaluate policies to understand their impact, making this role ideal for audit, compliance, and support personnel who need to validate and troubleshoot policies without the ability to modify them.
Directory Actions5
| Action | Condition |
|---|---|
microsoft.directory/resourcePolicy/assignments/standard/read | null |
microsoft.directory/resourcePolicy/configuration/standard/read | null |
microsoft.directory/resourcePolicy/definitions/standard/read | null |
microsoft.directory/resourcePolicy/evaluateAssignedPolicies | null |
microsoft.directory/resourcePolicy/evaluatePolicy | null |