Edit

Roles for Microsoft 365 services in Microsoft Entra ID

  • Article

All products in Microsoft 365 can be managed with administrative roles in Microsoft Entra ID. Some products also provide additional roles that are specific to that product. For information on the roles supported by each product, see the table below. For guidelines about role security planning, see Securing privileged access for hybrid and cloud deployments in Microsoft Entra ID.

Where to find content

Microsoft 365 service Role content API content
Admin roles in Office 365 and Microsoft 365 business plans Microsoft 365 admin roles Not available
Microsoft Entra ID and Microsoft Entra ID Protection Microsoft Entra built-in roles Graph API
Fetch role assignments
Exchange Online Exchange role-based access control PowerShell for Exchange
Fetch role assignments
SharePoint Online Microsoft Entra built-in roles
Also About the SharePoint admin role in Microsoft 365		 Graph API
Fetch role assignments
Teams/Skype for Business Microsoft Entra built-in roles Graph API
Fetch role assignments
Security & Compliance Center (Office 365 Advanced Threat Protection, Exchange Online Protection, Information Protection) Office 365 admin roles Exchange PowerShell
Fetch role assignments
Secure Score Microsoft Entra built-in roles Graph API
Fetch role assignments
Compliance Manager Compliance Manager roles Not available
Azure Information Protection Microsoft Entra built-in roles Graph API
Fetch role assignments
Microsoft Defender for Cloud Apps Role-based access control API reference
Azure Advanced Threat Protection Azure ATP role groups Not available
Windows Defender Advanced Threat Protection Windows Defender ATP role-based access control Not available
Privileged Identity Management Microsoft Entra built-in roles Graph API
Fetch role assignments
Intune Intune role-based access control Graph API
Fetch role assignments
Managed Desktop Microsoft Entra built-in roles Graph API
Fetch role assignments

Next steps