Microsoft Entra ID
GeneralPermissions Reference
In brief
The permissions reference now documents the Entra SOC Identity Responder role and its identity-containment actions, including disabling users, revoking active sign-in sessions, and resetting passwords.
What Entra admins need to know
Administrators can use the updated reference to understand this role’s permissions during SOC incident response.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| Edge Administrator | Manage all aspects of Microsoft Edge. | 3f1acade-1e04-4fbc-9b69-f0302cd84aef | | Entra Backup Administrator | Manage all aspects of Microsoft Entra Backup, such as create recovery jobs and manage backup snapshots. | b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb | | Entra Backup Reader | Read all aspects of Microsoft Entra Backup, such as list all preview jobs, recovery jobs, backup snapshots, and create preview jobs. | f42252d9-5400-4d7b-b9ef-cc582dbb8577 | | Entra SOC Identity Responder | Perform identity containment actions for SOC incident response, including disabling users, revoking active sign-in sessions, and resetting passwords.
| 58f930cc-fcf4-4152-852c-1d7dbf502139 | | Exchange Administrator | Can manage all aspects of the Exchange product. | 29232cdf-9323-42fd-ade2-1d097af3e4de | | Exchange Backup Administrator | Back up and restore content (including granular restore) for Exchange in Microsoft 365 Backup | 49eb8f75-97e9-4e37-9b2b-6c3ebfcffa31 | | Exchange Recipient Administrator | Can create or update Exchange Online recipients within the Exchange Online organization. | 31392ffb-586c-42d1-9346-e59415a2cc4e |
[!INCLUDE entra-backup-reader]
Entra SOC Identity Responder
[!INCLUDE entra-soc-identity-responder]
Exchange Administrator
[!INCLUDE exchange-administrator]
@@ -68,6 +68,7 @@ This article lists the permissions used by **built-in** roles. Only a subset of > | [Edge Administrator](#edge-administrator) | Manage all aspects of Microsoft Edge. | 3f1acade-1e04-4fbc-9b69-f0302cd84aef | > | [Entra Backup Administrator](#entra-backup-administrator) | Manage all aspects of Microsoft Entra Backup, such as create recovery jobs and manage backup snapshots. | b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb | > | [Entra Backup Reader](#entra-backup-reader) | Read all aspects of Microsoft Entra Backup, such as list all preview jobs, recovery jobs, backup snapshots, and create preview jobs. | f42252d9-5400-4d7b-b9ef-cc582dbb8577 |+> | [Entra SOC Identity Responder](#entra-soc-identity-responder) | Perform identity containment actions for SOC incident response, including disabling users, revoking active sign-in sessions, and resetting passwords.<br/>[](privileged-roles-permissions.md) | 58f930cc-fcf4-4152-852c-1d7dbf502139 | > | [Exchange Administrator](#exchange-administrator) | Can manage all aspects of the Exchange product. | 29232cdf-9323-42fd-ade2-1d097af3e4de | > | [Exchange Backup Administrator](#exchange-backup-administrator) | Back up and restore content (including granular restore) for Exchange in Microsoft 365 Backup | 49eb8f75-97e9-4e37-9b2b-6c3ebfcffa31 | > | [Exchange Recipient Administrator](#exchange-recipient-administrator) | Can create or update Exchange Online recipients within the Exchange Online organization. | 31392ffb-586c-42d1-9346-e59415a2cc4e |@@ -340,6 +341,10 @@ This article lists the permissions used by **built-in** roles. Only a subset of [!INCLUDE [entra-backup-reader](includes/entra-backup-reader.md)] +## Entra SOC Identity Responder++[!INCLUDE [entra-soc-identity-responder](includes/entra-soc-identity-responder.md)]+ ## Exchange Administrator [!INCLUDE [exchange-administrator](includes/exchange-administrator.md)]