Windows Update Deployment Administrator

Control PlaneEntraOps · EAMMicrosoft 365

Dado verificado em 30/06/2026 · Fonte

Role Actions

Control Plane

Management Plane

User Access

Template ID

32696413-001a-46ae-978c-ce0f6b3620d2

Categoria

M365

EAM Tier

Control Plane (Tier 0)

Enterprise Access Model: Control Plane

Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.

Esta role é classificada como Control Plane porque todas as suas 1 ações são desse tier.

1 Control Plane

Ação responsável:

microsoft.windows.updatesDeployments/allEntities/allProperties/allTasks

Descrição

Can create and manage all aspects of Windows Update deployments through the Windows Update for Business deployment service.

Role Definition (JSON)

{
  "@odata.type": "#microsoft.graph.unifiedRoleDefinition",
  "id": "32696413-001a-46ae-978c-ce0f6b3620d2",
  "displayName": "Windows Update Deployment Administrator",
  "description": "Can create and manage all aspects of Windows Update deployments through the Windows Update for Business deployment service.",
  "isBuiltIn": true,
  "isEnabled": true,
  "isPrivileged": false,
  "rolePermissions": [
    {
      "allowedResourceActions": [
        "microsoft.windows.updatesDeployments/allEntities/allProperties/allTasks"

Permissões completas

Todas as 1 role actions desta role, classificadas por tier do EAM.

Role Action	Categoria	Tier
`microsoft.windows.updatesDeployments/allEntities/allProperties/allTasks`	Global Endpoint Management	Tier 0

1 de 1 role actions

PowerShell

Get-MgRoleManagementDirectoryRoleDefinition `
  -UnifiedRoleDefinitionId "32696413-001a-46ae-978c-ce0f6b3620d2"

Microsoft Graph

GET https://graph.microsoft.com/v1.0/
  roleManagement/directory/
  roleDefinitions/32696413-001a-46ae-978c-ce0f6b3620d2

Ver a documentação oficial na Microsoft Learn

Roles relacionadas

Knowledge Administrator

Tier 0Microsoft 365

Knowledge Manager

Tier 0Microsoft 365

Windows 365 Administrator

Tier 0Microsoft 365