Microsoft Entra ID
AuthenticationPermissions Reference
In brief
The permissions reference no longer states that Security Administrators can perform identity containment actions during security incidents. It now describes the role as reading security information and reports and managing configuration in Microsoft Entra ID and Office 365.
What Entra admins need to know
Review incident-response role expectations if they rely on Security Administrators for identity containment actions.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| Reports Reader | Can read sign-in and audit reports. | 4a5d8f65-41da-4de4-8968-e035b65339cf | | Search Administrator | Can create and manage all aspects of Microsoft Search settings. | 0964bb5e-9bdb-4d7b-ac29-58e794862a40 | | Search Editor | Can create and manage the editorial content such as bookmarks, Q and As, locations, floorplan. | 8835291a-918c-4fd7-a9ce-faa49f0cf7d9 | | Security Administrator | Can read security information and reports, and manage configuration in Microsoft Entra ID and Office
365, and perform identity containment actions during security incidents.365.| 194ae4cb-b126-40b2-bd5b-6091b380977d | | Security Operator | Creates and manages security events.
@@ -120,7 +120,7 @@ This article lists the Microsoft Entra built-in roles you can assign to allow ma > | [Reports Reader](#reports-reader) | Can read sign-in and audit reports. | 4a5d8f65-41da-4de4-8968-e035b65339cf | > | [Search Administrator](#search-administrator) | Can create and manage all aspects of Microsoft Search settings. | 0964bb5e-9bdb-4d7b-ac29-58e794862a40 | > | [Search Editor](#search-editor) | Can create and manage the editorial content such as bookmarks, Q and As, locations, floorplan. | 8835291a-918c-4fd7-a9ce-faa49f0cf7d9 |-> | [Security Administrator](#security-administrator) | Can read security information and reports, and manage configuration in Microsoft Entra ID and Office 365, and perform identity containment actions during security incidents.<br/>[](privileged-roles-permissions.md) | 194ae4cb-b126-40b2-bd5b-6091b380977d |+> | [Security Administrator](#security-administrator) | Can read security information and reports, and manage configuration in Microsoft Entra ID and Office 365.<br/>[](privileged-roles-permissions.md) | 194ae4cb-b126-40b2-bd5b-6091b380977d | > | [Security Operator](#security-operator) | Creates and manages security events.<br/>[](privileged-roles-permissions.md) | 5f2222b1-57c3-48ba-8ad5-d4759f1fde6f | > | [Security Reader](#security-reader) | Can read security information and reports in Microsoft Entra ID and Office 365.<br/>[](privileged-roles-permissions.md) | 5d6b6bb7-de71-4623-b4af-96380a352509 | > | [Service Support Administrator](#service-support-administrator) | Can read service health information and manage support tickets. | f023fd81-a637-4b56-95fd-791ac0226033 |