You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/roles/permissions-reference.md
+13-1Lines changed: 13 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ ms.service: active-directory
9
9
ms.workload: identity
10
10
ms.subservice: roles
11
11
ms.topic: reference
12
-
ms.date: 10/06/2021
12
+
ms.date: 10/07/2021
13
13
ms.author: rolyon
14
14
ms.reviewer: abhijeetsinha
15
15
ms.custom: generated, it-pro, fasttrack-edit
@@ -52,6 +52,7 @@ This article lists the Azure AD built-in roles you can assign to allow managemen
52
52
> |[Directory Writers](#directory-writers)| Can read and write basic directory information. For granting access to applications, not intended for users. | 9360feb5-f418-4baa-8175-e2a00bac4301 |
53
53
> |[Domain Name Administrator](#domain-name-administrator)| Can manage domain names in cloud and on-premises. | 8329153b-31d0-4727-b945-745eb3bc5f31 |
54
54
> |[Dynamics 365 Administrator](#dynamics-365-administrator)| Can manage all aspects of the Dynamics 365 product. | 44367163-eba1-44c3-98af-f5787879f96a |
55
+
> |[Edge Administrator](#edge-administrator)| Manage all aspects of Microsoft Edge. | 3f1acade-1e04-4fbc-9b69-f0302cd84aef |
55
56
> |[Exchange Administrator](#exchange-administrator)| Can manage all aspects of the Exchange product. | 29232cdf-9323-42fd-ade2-1d097af3e4de |
56
57
> |[Exchange Recipient Administrator](#exchange-recipient-administrator)| Can create or update Exchange Online recipients within the Exchange Online organization. | 31392ffb-586c-42d1-9346-e59415a2cc4e |
57
58
> |[External ID User Flow Administrator](#external-id-user-flow-administrator)| Can create and manage all aspects of user flows. | 6e591065-9bad-43ed-90f3-e9424366d2f0 |
@@ -753,6 +754,17 @@ Users with this role have global permissions within Microsoft Dynamics 365 Onlin
753
754
> | microsoft.office365.supportTickets/allEntities/allTasks | Create and manage Microsoft 365 service requests |
754
755
> | microsoft.office365.webPortal/allEntities/standard/read | Read basic properties on all resources in the Microsoft 365 admin center |
755
756
757
+
## Edge Administrator
758
+
759
+
Users in this role can create and manage the enterprise site list required for Internet Explorer mode on Microsoft Edge. This role grants permissions to create, edit, and publish the site list and additionally allows access to manage support tickets. [Learn more](https://go.microsoft.com/fwlink/?linkid=2165707)
760
+
761
+
> [!div class="mx-tableFixed"]
762
+
> | Actions | Description |
763
+
> | --- | --- |
764
+
> | microsoft.edge/allEntities/allProperties/allTasks | Manage all aspects of Microsoft Edge |
765
+
> | microsoft.office365.supportTickets/allEntities/allTasks | Create and manage Microsoft 365 service requests |
766
+
> | microsoft.office365.webPortal/allEntities/standard/read | Read basic properties on all resources in the Microsoft 365 admin center |
767
+
756
768
## Exchange Administrator
757
769
758
770
Users with this role have global permissions within Microsoft Exchange Online, when the service is present. Also has the ability to create and manage all Microsoft 365 groups, manage support tickets, and monitor service health. More information at [About Microsoft 365 admin roles](https://support.office.com/article/About-Office-365-admin-roles-da585eea-f576-4f55-a1e0-87090b6aaa9d).
0 commit comments