Knowledge Manager

Control PlaneEntraOps · EAMMicrosoft 365

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

744ec460-397e-42ad-a462-8b3f9747a02c

Categoria

M365

EAM Tier

Control Plane (Tier 0)

Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque 5 de 11 ações (45%) são desse tier — o tier da role acompanha sempre a ação de maior privilégio, não o conjunto.

5 Control Plane5 Management Plane1 User Access

Descrição

Organize, create, manage, and promote topics and knowledge.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "744ec460-397e-42ad-a462-8b3f9747a02c",
  "displayName": "Knowledge Manager",
  "description": "Organize, create, manage, and promote topics and knowledge.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.directory/groups.security/basic/update",

Permissões completas

Todas as 11 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.directory/groups.security/basic/update`	Group Management	Tier 0
`microsoft.directory/groups.security/create`	Group Management	Tier 0
`microsoft.directory/groups.security/delete`	Group Management	Tier 0
`microsoft.directory/groups.security/members/update`	Group Management	Tier 0
`microsoft.directory/groups.security/owners/update`	Group Management	Tier 0
`microsoft.office365.knowledge/contentUnderstanding/analytics/allProperties/read`	Microsoft 365 Platform Operations	Tier 1
`microsoft.office365.knowledge/knowledgeNetwork/topicVisibility/allProperties/allTasks`	Microsoft 365 Platform Operations	Tier 1
`microsoft.office365.sharePoint/allEntities/allTasks`	Microsoft SharePoint	Tier 1
`microsoft.office365.supportTickets/allEntities/allTasks`	Microsoft 365 Support Operations	Tier 1
`microsoft.office365.webPortal/allEntities/standard/read`	Microsoft 365 Support Operations	Tier 1
`microsoft.directory/groups.security/createAsOwner`	Extended member	Tier 2

11 de 11 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "744ec460-397e-42ad-a462-8b3f9747a02c"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/744ec460-397e-42ad-a462-8b3f9747a02c

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Knowledge Administrator

Tier 0Microsoft 365

Windows 365 Administrator

Tier 0Microsoft 365

Windows Update Deployment Administrator

Tier 0Microsoft 365