Knowledge Administrator

Control PlaneEntraOps · EAMMicrosoft 365

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

b5a8dcf3-09d5-43a9-a639-8e29ef291470

Categoria

M365

EAM Tier

Control Plane (Tier 0)

Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque 5 de 13 ações (38%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.

5 Control Plane7 Management Plane1 User Access

Descrição

Can configure knowledge, learning, and other intelligent features.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "b5a8dcf3-09d5-43a9-a639-8e29ef291470",
  "displayName": "Knowledge Administrator",
  "description": "Can configure knowledge, learning, and other intelligent features.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/groups.security/basic/update",

Permissões completas

Todas as 13 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/groups.security/basic/update`	Group Management	Tier 0
`microsoft.directory/groups.security/create`	Group Management	Tier 0
`microsoft.directory/groups.security/delete`	Group Management	Tier 0
`microsoft.directory/groups.security/members/update`	Group Management	Tier 0
`microsoft.directory/groups.security/owners/update`	Group Management	Tier 0
`microsoft.office365.knowledge/contentUnderstanding/allProperties/allTasks`	Microsoft 365 Platform Operations	Tier 1
`microsoft.office365.knowledge/knowledgeNetwork/allProperties/allTasks`	Microsoft 365 Platform Operations	Tier 1
`microsoft.office365.knowledge/learningSources/allProperties/allTasks`	Microsoft 365 Platform Operations	Tier 1
`microsoft.office365.protectionCenter/sensitivityLabels/allProperties/read`	Security and Compliance	Tier 1
`microsoft.office365.sharePoint/allEntities/allTasks`	Microsoft SharePoint	Tier 1
`microsoft.office365.supportTickets/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1
`microsoft.directory/groups.security/createAsOwner`	Extended member	Tier 2

13 de 13 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "b5a8dcf3-09d5-43a9-a639-8e29ef291470"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/b5a8dcf3-09d5-43a9-a639-8e29ef291470

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Windows 365 Administrator

Tier 0Microsoft 365

Windows Update Deployment Administrator

Tier 0Microsoft 365