B2C IEF Keyset Administrator

Entra ID · Security · EAM ControlPlane

B2C IEF Keyset Administrator

Privilegiada
Control PlaneEntraOps · EAMSecurity

Dado verificado em · Fonte

Role Actions
1
Control Plane
1
Management Plane
0
User Access
0
Template ID
aaf43236-0c0d-4d5f-883a-6955382ac081
Categoria
Security
EAM Tier
Control Plane (Tier 0)
Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 1 ações são desse tier.

1 Control Plane

Ação responsável:

microsoft.directory/b2cTrustFrameworkKeySet/allProperties/allTasks

Descrição

Can manage secrets for federation and encryption in the Identity Experience Framework (IEF).

Role Definition (JSON)

{
"@odata.type": "#microsoft.graph.unifiedRoleDefinition",
"id": "aaf43236-0c0d-4d5f-883a-6955382ac081",
"displayName": "B2C IEF Keyset Administrator",
"description": "Can manage secrets for federation and encryption in the Identity Experience Framework (IEF).",
"isBuiltIn": true,
"isEnabled": true,
"isPrivileged": true,
"rolePermissions": [
{
"allowedResourceActions": [
"microsoft.directory/b2cTrustFrameworkKeySet/allProperties/allTasks"

Permissões completas

Todas as 1 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/b2cTrustFrameworkKeySet/allProperties/allTasks
External IdentitiesTier 0

1 de 1 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "aaf43236-0c0d-4d5f-883a-6955382ac081"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/aaf43236-0c0d-4d5f-883a-6955382ac081
Ver a documentação oficial na Microsoft Learn

Roles relacionadas