{"items":[{"href":"./","toc_title":"Microsoft Entra RBAC documentation"},{"children":[{"href":"custom-overview","toc_title":"What is Microsoft Entra RBAC?"},{"href":"whats-new","toc_title":"What\u0027s new in docs"}],"toc_title":"Overview"},{"children":[{"href":"concept-understand-roles","toc_title":"Understand Microsoft Entra roles"},{"children":[{"href":"/azure/role-based-access-control/rbac-and-directory-admin-roles?toc=/entra/identity/role-based-access-control/TOC.yml\u0026bc=/entra/identity/role-based-access-control/breadcrumb/toc.yml","toc_title":"Compare Azure and Microsoft Entra roles"},{"href":"m365-workload-docs","toc_title":"Roles across Microsoft services"}],"toc_title":"Compare roles"},{"href":"groups-concept","toc_title":"Use groups to manage role assignments"},{"children":[{"href":"administrative-units","toc_title":"Administrative units"},{"href":"admin-units-restricted-management","toc_title":"Restricted management"}],"toc_title":"Administrative units"},{"href":"best-practices","toc_title":"Best practices"},{"children":[{"href":"privileged-roles-permissions","toc_title":"Privileged roles and permissions"},{"href":"security-planning","toc_title":"Role security planning"},{"href":"security-emergency-access","toc_title":"Create emergency accounts"},{"href":"protected-actions-overview","toc_title":"Protected actions"}],"toc_title":"Security"}],"toc_title":"Concepts"},{"children":[{"href":"prerequisites","toc_title":"Prerequisites"},{"href":"role-definitions-list","toc_title":"List role definitions"},{"href":"view-assignments","toc_title":"List role assignments"},{"children":[{"href":"manage-roles-portal","toc_title":"Assign roles"},{"href":"groups-create-eligible","toc_title":"Create a role-assignable group"}],"toc_title":"Assign roles"},{"href":"groups-remove-assignment","toc_title":"Remove role assignments"},{"children":[{"href":"custom-create","toc_title":"Create a custom role"},{"href":"custom-enterprise-apps","toc_title":"Create custom roles for enterprise apps"},{"href":"quickstart-app-registration-limits","toc_title":"Create unlimited app registrations"}],"toc_title":"Create custom roles"},{"children":[{"href":"admin-units-manage","toc_title":"Create or delete"},{"href":"admin-units-members-add","toc_title":"Add members"},{"href":"admin-units-members-list","toc_title":"List members"},{"href":"admin-units-members-remove","toc_title":"Remove members"},{"href":"admin-units-members-dynamic","toc_title":"Manage rules for dynamic membership groups"}],"toc_title":"Administrative units"},{"children":[{"href":"protected-actions-add","toc_title":"Add, remove, or test"}],"toc_title":"Protected actions"},{"children":[{"href":"delegate-app-roles","toc_title":"Delegate admin role"},{"href":"my-staff-configure","toc_title":"My Staff delegation"}],"toc_title":"Delegate"},{"children":[{"href":"groups-faq-troubleshooting","toc_title":"Troubleshoot roles assigned to groups"},{"href":"admin-units-faq-troubleshoot","toc_title":"Troubleshoot administrative units"},{"href":"../../fundamentals/how-to-get-support?toc=/entra/identity/role-based-access-control/TOC.yml\u0026bc=/entra/identity/role-based-access-control/breadcrumb/toc.yml","toc_title":"Get support for Microsoft Entra ID"}],"toc_title":"Troubleshoot"}],"toc_title":"How-to guides"},{"children":[{"href":"permissions-reference","toc_title":"Built-in roles"},{"href":"delegate-by-task","toc_title":"Least privileged roles by task"},{"href":"../../fundamentals/users-default-permissions?toc=/entra/identity/role-based-access-control/TOC.yml\u0026bc=/entra/identity/role-based-access-control/breadcrumb/toc.yml","toc_title":"Default user permissions"},{"children":[{"href":"custom-available-permissions","toc_title":"App registration permissions"},{"href":"custom-enterprise-app-permissions","toc_title":"Enterprise app permissions"},{"href":"custom-consent-permissions","toc_title":"App consent permissions"},{"href":"custom-device-permissions","toc_title":"Device management permissions"},{"href":"custom-user-permissions","toc_title":"User management permissions"},{"href":"custom-group-permissions","toc_title":"Group management permissions"}],"toc_title":"Custom role permissions"},{"href":"../users/directory-service-limits-restrictions?toc=/entra/identity/role-based-access-control/TOC.yml\u0026bc=/entra/identity/role-based-access-control/breadcrumb/toc.yml","toc_title":"Microsoft Entra service limits"},{"href":"/powershell/module/microsoft.graph.identity.governance/","toc_title":"Microsoft Graph PowerShell"},{"href":"/graph/api/resources/rolemanagement","toc_title":"Microsoft Graph API"}],"toc_title":"Reference"}],"metadata":{"author":"rolyon","brand":"entra","breadcrumb_path":"/entra/breadcrumb/toc.json","count_of_node_with_href":46,"extendBreadcrumb":false,"feedback_github_repo":"MicrosoftDocs/entra-docs","feedback_product_url":"https://feedback.azure.com/d365community/forum/79b1327d-d925-ec11-b6e6-000d3a4f06a4","feedback_system":"Standard","manager":"pmwongera","ms.author":"rolyon","ms.service":"entra-id","ms.subservice":"role-based-access-control","open_to_public_contributors":true,"searchScope":["Microsoft Entra"],"titleSuffix":"Microsoft Entra ID","uhfHeaderId":"MSDocsHeader-Entra"}}