Skip to content

Commit db6b35d

Browse files
authored
Merge pull request #97234 from abhijeetsinha/patch-26
Update directory-assign-admin-roles.md
2 parents 0bf42af + 8fa5a6b commit db6b35d

File tree

1 file changed

+25
-1
lines changed

1 file changed

+25
-1
lines changed

articles/active-directory/users-groups-roles/directory-assign-admin-roles.md

Lines changed: 25 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -323,6 +323,10 @@ Users with this role have global permissions within Microsoft Power BI, when the
323323
> [!NOTE]
324324
> In Microsoft Graph API, Azure AD Graph API, and Azure AD PowerShell, this role is identified as "Power BI Service Administrator ". It is "Power BI Administrator" in the [Azure portal](https://portal.azure.com).
325325
326+
### [Power Platform Administrator](#power-platform-administrator-permissions)
327+
328+
Users in this role can create and manage all aspects of environments, PowerApps, Flows, Data Loss Prevention policies. Additionally, users with this role have the ability to manage support tickets and monitor service health.
329+
326330
### [Privileged Authentication Administrator](#privileged-authentication-administrator-permissions)
327331

328332
Users with this role can set or reset non-password credentials for all users, including global administrators, and can update passwords for all users. Privileged Authentication Administrators can force users to re-register against existing non-password credential (e.g. MFA, FIDO) and revoke ‘remember MFA on the device’, prompting for MFA on the next login of all users.
@@ -1341,7 +1345,6 @@ Can manage all aspects of the Power BI product.
13411345
> This role has additional permissions outside of Azure Active Directory. For more information, see role description above.
13421346
>
13431347
>
1344-
13451348
| **Actions** | **Description** |
13461349
| --- | --- |
13471350
| microsoft.azure.serviceHealth/allEntities/allTasks | Read and configure Azure Service Health. |
@@ -1351,6 +1354,26 @@ Can manage all aspects of the Power BI product.
13511354
| microsoft.office365.serviceHealth/allEntities/allTasks | Read and configure Office 365 Service Health. |
13521355
| microsoft.office365.supportTickets/allEntities/allTasks | Create and manage Office 365 support tickets. |
13531356

1357+
1358+
### Power Platform Administrator permissions
1359+
1360+
Can create and manage all aspects of Microsoft Dynamics 365, PowerApps and Microsoft Flow.
1361+
1362+
> [!NOTE]
1363+
> This role has additional permissions outside of Azure Active Directory. For more information, see role description above.
1364+
>
1365+
>
1366+
| **Actions** | **Description** |
1367+
| --- | --- |
1368+
| microsoft.azure.serviceHealth/allEntities/allTasks | Read and configure Azure Service Health. |
1369+
| microsoft.azure.supportTickets/allEntities/allTasks | Create and manage Azure support tickets. |
1370+
| microsoft.dynamics365/allEntities/allTasks | Manage all aspects of Dynamics 365. |
1371+
| microsoft.flow/allEntities/allTasks | Manage all aspects of Microsoft Flow. |
1372+
| microsoft.powerApps/allEntities/allTasks | Manage all aspects of PowerApps. |
1373+
| microsoft.office365.webPortal/allEntities/basic/read | Read basic properties on all resources in microsoft.office365.webPortal. |
1374+
| microsoft.office365.serviceHealth/allEntities/allTasks | Read and configure Office 365 Service Health. |
1375+
| microsoft.office365.supportTickets/allEntities/allTasks | Create and manage Office 365 support tickets. |
1376+
13541377
### Privileged Authentication Administrator permissions
13551378

13561379
Allowed to view, set and reset authentication method information for any user (admin or non-admin).
@@ -1704,6 +1727,7 @@ Partner Tier1 Support | Partner tier1 support | 4ba39ca4-527c-499a-b93d-d9b492c5
17041727
Partner Tier2 Support | Partner tier2 support | e00e864a-17c5-4a4b-9c06-f5b95a8d5bd8
17051728
Password Administrator | Password administrator | 966707d0-3269-4727-9be2-8c3a10f19b9d
17061729
Power BI Service Administrator | Power BI administrator | a9ea8996-122f-4c74-9520-8edcd192826c
1730+
Power Platform Administrator | Power platform administrator | 11648597-926c-4cf3-9c36-bcebb0ba8dcc
17071731
Privileged Authentication Administrator | Privileged authentication administrator | 7be44c8a-adaf-4e2a-84d6-ab2649e08a13
17081732
Privileged Role Administrator | Privileged role administrator | e8611ab8-c189-46e8-94e1-60213ab1f814
17091733
Reports Reader | Reports reader | 4a5d8f65-41da-4de4-8968-e035b65339cf

0 commit comments

Comments
 (0)