← All Roles

SharePoint Embedded Administrator

Enabled
Versionv1
Date Added2026-06-21
Categorycollaboration
Assignment Modeallowed
Built-inYes
Template ID1a7d78b6-429f-476b-b8eb-35fb715fffd4

Description

Manage all aspects of SharePoint Embedded containers.

Details

Assign the SharePoint Embedded Administrator role to users who need to do the following tasks:

  • Perform all tasks using PowerShell, Microsoft Graph API, or SharePoint admin center
  • Manage, configure, and maintain SharePoint Embedded containers
  • Enumerate and manage SharePoint Embedded containers
  • Enumerate and manage permissions for SharePoint Embedded containers
  • Manage storage of SharePoint Embedded containers in a tenant
  • Assign security and compliance policies on SharePoint Embedded containers
  • Apply security and compliance policies on SharePoint Embedded containers in a tenant

Directory Actions6

  • microsoft.office365.fileStorageContainers/allEntities/allProperties/allTasks
  • microsoft.office365.network/performance/allProperties/read
  • microsoft.office365.serviceHealth/allEntities/allTasks
  • microsoft.office365.supportTickets/allEntities/allTasks
  • microsoft.office365.usageReports/allEntities/allProperties/read
  • microsoft.office365.webPortal/allEntities/standard/read

Graph API Permissions9

Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.

  • ChangeManagement.Read.All
  • Directory.Read.All
  • FileStorageContainer.Selected
  • NetworkAccess-Reports.Read.All
  • Reports.Read.All
  • ReportSettings.Read.All
  • ServiceHealth.Read.All
  • ServiceMessage.Read.All
  • ServiceMessageViewpoint.Write