B2C IEF Keyset Administrator
PrivilegiadaControl PlaneEntraOps · EAMSecurity
Dado verificado em · Fonte
Role Actions
1Control Plane
1Management Plane
0User Access
0Template ID
aaf43236-0c0d-4d5f-883a-6955382ac081Categoria
SecurityEAM Tier
Control Plane (Tier 0)Enterprise Access Model: Control Plane
Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.
Esta role é classificada como Control Plane porque todas as suas 1 ações são desse tier.
1 Control Plane
Ação responsável:
microsoft.directory/b2cTrustFrameworkKeySet/allProperties/allTasksDescrição
Can manage secrets for federation and encryption in the Identity Experience Framework (IEF).
Role Definition (JSON)
{"@odata.type": "#microsoft.graph.unifiedRoleDefinition","id": "aaf43236-0c0d-4d5f-883a-6955382ac081","displayName": "B2C IEF Keyset Administrator","description": "Can manage secrets for federation and encryption in the Identity Experience Framework (IEF).","isBuiltIn": true,"isEnabled": true,"isPrivileged": true,"rolePermissions": [{"allowedResourceActions": ["microsoft.directory/b2cTrustFrameworkKeySet/allProperties/allTasks"
Permissões completas
Todas as 1 role actions desta role, classificadas por tier do EAM.
| Role Action | Categoria | Tier |
|---|---|---|
microsoft.directory/b2cTrustFrameworkKeySet/allProperties/allTasks | External Identities | Tier 0 |
1 de 1 role actions
PowerShell
Get-MgRoleManagementDirectoryRoleDefinition ` -UnifiedRoleDefinitionId "aaf43236-0c0d-4d5f-883a-6955382ac081"
Microsoft Graph
GET https://graph.microsoft.com/v1.0/ roleManagement/directory/ roleDefinitions/aaf43236-0c0d-4d5f-883a-6955382ac081