Voltar

Directory Synchronization Accounts

Entra ID · Identity · EAM ControlPlane

Directory Synchronization Accounts

Control PlaneEntraOps · EAMIdentity

Dado verificado em · Fonte

Role Actions
1
Control Plane
0
Management Plane
1
User Access
0
Template ID
d29b2b05-8046-44ba-8758-1e26182fcf32
Categoria
Identity
EAM Tier
Control Plane (Tier 0)
Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque a classificação vem da definição da própria role na fonte, não das ações listadas aqui.

1 Management Plane

Descrição

Only used by Microsoft Entra Connect service.

Role Definition (JSON)

{

  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",

  "id": "d29b2b05-8046-44ba-8758-1e26182fcf32",

  "displayName": "Directory Synchronization Accounts",

  "description": "Only used by Microsoft Entra Connect service.",

  "isBuiltIn": true,

  "isEnabled": true,

  "isPrivileged": false,

  "rolePermissions": [

    {

      "allowedResourceActions": [

        "microsoft.directory/onPremisesSynchronization/standard/read"

Permissões completas

Todas as 1 role actions desta role, classificadas por tier do EAM.

Role ActionCategoriaTier
microsoft.directory/onPremisesSynchronization/standard/read
Tenant Configuration (Reader)Tier 1

1 de 1 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "d29b2b05-8046-44ba-8758-1e26182fcf32"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/d29b2b05-8046-44ba-8758-1e26182fcf32
Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Agent ID Administrator
Tier 0Identity
Agent ID Developer
Tier 0Identity
Agent Registry Administrator
Tier 0Identity
Directory Writers
Tier 0Identity
Domain Name Administrator
Tier 0Identity