You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/roles/permissions-reference.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -917,7 +917,7 @@ Users with this role have access to all administrative features in Azure Active
917
917
> [!div class="mx-tableFixed"]
918
918
> | Actions | Description |
919
919
> | --- | --- |
920
-
> | microsoft.directory/accessReviews/allProperties/allTasks | Create and delete access reviews, read and update all properties of access reviews, and manage access reviews of groups in Azure AD |
920
+
> | microsoft.directory/accessReviews/allProperties/allTasks |(Deprecated) Create and delete access reviews, read and update all properties of access reviews, and manage access reviews of groups in Azure AD |
921
921
> | microsoft.directory/accessReviews/definitions/allProperties/allTasks | Manage access reviews of all reviewable resources in Azure AD |
922
922
> | microsoft.directory/adminConsentRequestPolicy/allProperties/allTasks | Manage admin consent request policies in Azure AD |
923
923
> | microsoft.directory/administrativeUnits/allProperties/allTasks | Create and manage administrative units (including members) |
@@ -1062,7 +1062,7 @@ Users in this role can read settings and administrative information across Micro
1062
1062
> [!div class="mx-tableFixed"]
1063
1063
> | Actions | Description |
1064
1064
> | --- | --- |
1065
-
> | microsoft.directory/accessReviews/allProperties/read | Read all properties of access reviews |
1065
+
> | microsoft.directory/accessReviews/allProperties/read |(Deprecated) Read all properties of access reviews |
1066
1066
> | microsoft.directory/accessReviews/definitions/allProperties/read | Read all properties of access reviews of all reviewable resources in Azure AD |
1067
1067
> | microsoft.directory/adminConsentRequestPolicy/allProperties/read | Read all properties of admin consent request policies in Azure AD |
1068
1068
> | microsoft.directory/administrativeUnits/allProperties/read | Read all properties of administrative units, including members |
@@ -1275,7 +1275,7 @@ Users with this role can manage Azure AD identity governance configuration, incl
1275
1275
> | microsoft.directory/accessReviews/definitions.groups/allProperties/update | Update all properties of access reviews for membership in Security and Microsoft 365 groups, excluding role-assignable groups. |
1276
1276
> | microsoft.directory/accessReviews/definitions.groups/create | Create access reviews for membership in Security and Microsoft 365 groups. |
1277
1277
> | microsoft.directory/accessReviews/definitions.groups/delete | Delete access reviews for membership in Security and Microsoft 365 groups. |
1278
-
> | microsoft.directory/accessReviews/allProperties/allTasks | Create and delete access reviews, read and update all properties of access reviews, and manage access reviews of groups in Azure AD |
1278
+
> | microsoft.directory/accessReviews/allProperties/allTasks |(Deprecated) Create and delete access reviews, read and update all properties of access reviews, and manage access reviews of groups in Azure AD |
1279
1279
> | microsoft.directory/entitlementManagement/allProperties/allTasks | Create and delete resources, and read and update all properties in Azure AD entitlement management |
1280
1280
> | microsoft.directory/groups/members/update | Update members of Security groups and Microsoft 365 groups, excluding role-assignable groups |
1281
1281
> | microsoft.directory/servicePrincipals/appRoleAssignedTo/update | Update service principal role assignments |
0 commit comments