Usage Summary Reports Reader

Description

Can see only tenant level aggregates in Microsoft 365 Usage Analytics and Productivity Score.

Details

Users with this role can access tenant level aggregated data and associated insights in Microsoft 365 Admin Center for Usage and Productivity Score but cannot access any user level details or insights. In Microsoft 365 Admin Center for the two reports, we differentiate between tenant level aggregated data and user level details. This role gives an extra layer of protection on individual user identifiable data, which was requested by both customers and legal teams.

Directory Actions3

• microsoft.office365.network/performance/allProperties/read
• microsoft.office365.usageReports/allEntities/standard/read
• microsoft.office365.webPortal/allEntities/standard/read

Graph API Permissions4

Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.

• Directory.Read.All
• NetworkAccess-Reports.Read.All
• Reports.Read.All
• ReportSettings.Read.All