Authentication Policy Administrator
Control PlaneSecurity19 role actions
Template ID
0526716b-113d-4c15-b2c8-68e3c22b9f80Categoria
SecurityEAM Tier
Control Plane (Tier 0)Enterprise Access Model: Control Plane
Controle total do tenant. Comprometimento leva a takeover completo. Isole de planos inferiores.
Descrição
Users in this role can create, deploy, and maintain password protection policies and configure authentication methods in a tenant. An Authentication policy administrator can perform the following tasks - manage authentication method sett...
Permissões completas
Todas as 19 role actions desta role, classificadas por tier do EAM.
| Role Action | Categoria | Tier |
|---|---|---|
microsoft.directory/organization/strongAuthentication/allTasks | Authentication | Tier 0 |
microsoft.directory/userCredentialPolicies/basic/update | Authentication | Tier 0 |
microsoft.directory/userCredentialPolicies/create | Authentication | Tier 0 |
microsoft.directory/userCredentialPolicies/delete | Authentication | Tier 0 |
microsoft.directory/userCredentialPolicies/owners/update | Authentication | Tier 0 |
microsoft.directory/userCredentialPolicies/tenantDefault/update | Authentication | Tier 0 |
microsoft.directory/verifiableCredentials/configuration/allProperties/update | Verified ID | Tier 0 |
microsoft.directory/verifiableCredentials/configuration/contracts/allProperties/update | Verified ID | Tier 0 |
microsoft.directory/verifiableCredentials/configuration/contracts/cards/revoke | Verified ID | Tier 0 |
microsoft.directory/verifiableCredentials/configuration/contracts/create | Verified ID | Tier 0 |
microsoft.directory/verifiableCredentials/configuration/create | Verified ID | Tier 0 |
microsoft.directory/verifiableCredentials/configuration/delete | Verified ID | Tier 0 |
microsoft.azure.supportTickets/allEntities/allTasks | Support and Service Health | Tier 1 |
microsoft.directory/userCredentialPolicies/owners/read | Tenant Configuration (Reader) | Tier 1 |
microsoft.directory/userCredentialPolicies/policyAppliedTo/read | Tenant Configuration (Reader) | Tier 1 |
microsoft.directory/userCredentialPolicies/standard/read | Tenant Configuration (Reader) | Tier 1 |
microsoft.directory/verifiableCredentials/configuration/allProperties/read | Tenant Configuration (Reader) | Tier 1 |
microsoft.directory/verifiableCredentials/configuration/contracts/allProperties/read | Tenant Configuration (Reader) | Tier 1 |
microsoft.directory/verifiableCredentials/configuration/contracts/cards/allProperties/read | Tenant Configuration (Reader) | Tier 1 |
19 de 19 role actions
PowerShell
Get-MgRoleManagementDirectoryRoleDefinition ` -UnifiedRoleDefinitionId "0526716b-113d-4c15-b2c8-68e3c22b9f80"
Microsoft Graph
GET https://graph.microsoft.com/v1.0/ roleManagement/directory/ roleDefinitions/0526716b-113d-4c15-b2c8-68e3c22b9f80