B2C IEF Policy Administrator

Control PlaneEntraOps · EAMSecurity

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

3edaf663-341e-4475-9f94-5c398ef6c070

Categoria

Security

EAM Tier

Control Plane (Tier 0)

Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 1 ações são desse tier.

1 Control Plane

Ação responsável:

microsoft.directory/b2cTrustFrameworkPolicy/allProperties/allTasks

Descrição

Can create and manage trust framework policies in the Identity Experience Framework (IEF).

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "3edaf663-341e-4475-9f94-5c398ef6c070",
  "displayName": "B2C IEF Policy Administrator",
  "description": "Can create and manage trust framework policies in the Identity Experience Framework (IEF).",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/b2cTrustFrameworkPolicy/allProperties/allTasks"

Permissões completas

Todas as 1 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/b2cTrustFrameworkPolicy/allProperties/allTasks`	External Identities	Tier 0

1 de 1 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "3edaf663-341e-4475-9f94-5c398ef6c070"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/3edaf663-341e-4475-9f94-5c398ef6c070

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Authentication Administrator

Tier 0Security

Authentication Extensibility Administrator

Tier 0Security

Authentication Extensibility Password Administrator

Tier 0Security

Authentication Policy Administrator

Tier 0Security

B2C IEF Keyset Administrator

Tier 0Security