Back to Operation

Entra Connect Health Service Admin

Azure Built-in Role

Role Information

Details and metadata

Role ID
93629c8c-5d36-4533-85cd-f5bb3338710e
Type
BuiltInRole
Last Updated (Azure)
2025-05-02 17:10:56

Change History

Track all modifications to this role

2025-12-14 23:49:13 Initial Scan
View details
{
  "properties": {
    "roleName": "Entra Connect Health Service Admin",
    "type": "BuiltInRole",
    "description": "Can set up and manage Microsoft Entra Connect Health. Includes agent set up and managing services on the Azure portal",
    "assignableScopes": [
      "/providers/Microsoft.ADHybridhealthService"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.ADHybridHealthService/configuration/action",
          "Microsoft.ADHybridHealthService/services/action",
          "Microsoft.ADHybridHealthService/addsservices/action",
          "Microsoft.ADHybridHealthService/addsservices/write",
          "Microsoft.ADHybridHealthService/addsservices/servicemembers/action",
          "Microsoft.ADHybridHealthService/addsservices/read",
          "Microsoft.ADHybridHealthService/addsservices/delete",
          "Microsoft.ADHybridHealthService/addsservices/addomainservicemembers/read",
          "Microsoft.ADHybridHealthService/addsservices/alerts/read",
          "Microsoft.ADHybridHealthService/addsservices/configuration/read",
          "Microsoft.ADHybridHealthService/addsservices/dimensions/read",
          "Microsoft.ADHybridHealthService/addsservices/features/userpreference/read",
          "Microsoft.ADHybridHealthService/addsservices/forestsummary/read",
          "Microsoft.ADHybridHealthService/addsservices/metricmetadata/read",
          "Microsoft.ADHybridHealthService/addsservices/metrics/groups/read",
          "Microsoft.ADHybridHealthService/addsservices/premiumcheck/read",
          "Microsoft.ADHybridHealthService/addsservices/replicationdetails/read",
          "Microsoft.ADHybridHealthService/addsservices/replicationstatus/read",
          "Microsoft.ADHybridHealthService/addsservices/replicationsummary/read",
          "Microsoft.ADHybridHealthService/addsservices/servicemembers/delete",
          "Microsoft.ADHybridHealthService/addsservices/servicemembers/credentials/read",
          "Microsoft.ADHybridHealthService/services/write",
          "Microsoft.ADHybridHealthService/services/read",
          "Microsoft.ADHybridHealthService/services/delete",
          "Microsoft.ADHybridHealthService/services/servicemembers/action",
          "Microsoft.ADHybridHealthService/services/alerts/read",
          "Microsoft.ADHybridHealthService/services/feedbacktype/feedback/read",
          "Microsoft.ADHybridHealthService/services/ipAddressAggregates/read",
          "Microsoft.ADHybridHealthService/services/ipAddressAggregateSettings/read",
          "Microsoft.ADHybridHealthService/services/ipAddressAggregateSettings/write",
          "Microsoft.ADHybridHealthService/services/metricmetadata/read",
          "Microsoft.ADHybridHealthService/services/metrics/groups/read",
          "Microsoft.ADHybridHealthService/services/metrics/groups/average/read",
          "Microsoft.ADHybridHealthService/services/metrics/groups/sum/read",
          "Microsoft.ADHybridHealthService/services/monitoringconfiguration/write",
          "Microsoft.ADHybridHealthService/services/monitoringconfigurations/read",
          "Microsoft.ADHybridHealthService/services/monitoringconfigurations/write",
          "Microsoft.ADHybridHealthService/services/premiumcheck/read",
          "Microsoft.ADHybridHealthService/services/reports/generateBlobUri/action",
          "Microsoft.ADHybridHealthService/services/reports/blobUris/read",
          "Microsoft.ADHybridHealthService/services/reports/details/read",
          "Microsoft.ADHybridHealthService/services/checkservicefeatureavailibility/read",
          "Microsoft.ADHybridHealthService/services/exporterrors/read",
          "Microsoft.ADHybridHealthService/services/exportstatus/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/delete",
          "Microsoft.ADHybridHealthService/services/servicemembers/alerts/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/credentials/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/datafreshness/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/exportstatus/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/metrics/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/metrics/groups/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/serviceconfiguration/read",
          "Microsoft.ADHybridHealthService/services/tenantwhitelisting/read",
          "Microsoft.ADHybridHealthService/configuration/write",
          "Microsoft.ADHybridHealthService/configuration/read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2025-05-02T17:10:56.62Z",
    "updatedOn": "2025-05-02T17:10:56.62Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/93629c8c-5d36-4533-85cd-f5bb3338710e",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "93629c8c-5d36-4533-85cd-f5bb3338710e"
}

Latest Role JSON

Raw definition from Azure

{
  "properties": {
    "roleName": "Entra Connect Health Service Admin",
    "type": "BuiltInRole",
    "description": "Can set up and manage Microsoft Entra Connect Health. Includes agent set up and managing services on the Azure portal",
    "assignableScopes": [
      "/providers/Microsoft.ADHybridhealthService"
    ],
    "permissions": [
      {
        "actions": [
          "Microsoft.ADHybridHealthService/configuration/action",
          "Microsoft.ADHybridHealthService/services/action",
          "Microsoft.ADHybridHealthService/addsservices/action",
          "Microsoft.ADHybridHealthService/addsservices/write",
          "Microsoft.ADHybridHealthService/addsservices/servicemembers/action",
          "Microsoft.ADHybridHealthService/addsservices/read",
          "Microsoft.ADHybridHealthService/addsservices/delete",
          "Microsoft.ADHybridHealthService/addsservices/addomainservicemembers/read",
          "Microsoft.ADHybridHealthService/addsservices/alerts/read",
          "Microsoft.ADHybridHealthService/addsservices/configuration/read",
          "Microsoft.ADHybridHealthService/addsservices/dimensions/read",
          "Microsoft.ADHybridHealthService/addsservices/features/userpreference/read",
          "Microsoft.ADHybridHealthService/addsservices/forestsummary/read",
          "Microsoft.ADHybridHealthService/addsservices/metricmetadata/read",
          "Microsoft.ADHybridHealthService/addsservices/metrics/groups/read",
          "Microsoft.ADHybridHealthService/addsservices/premiumcheck/read",
          "Microsoft.ADHybridHealthService/addsservices/replicationdetails/read",
          "Microsoft.ADHybridHealthService/addsservices/replicationstatus/read",
          "Microsoft.ADHybridHealthService/addsservices/replicationsummary/read",
          "Microsoft.ADHybridHealthService/addsservices/servicemembers/delete",
          "Microsoft.ADHybridHealthService/addsservices/servicemembers/credentials/read",
          "Microsoft.ADHybridHealthService/services/write",
          "Microsoft.ADHybridHealthService/services/read",
          "Microsoft.ADHybridHealthService/services/delete",
          "Microsoft.ADHybridHealthService/services/servicemembers/action",
          "Microsoft.ADHybridHealthService/services/alerts/read",
          "Microsoft.ADHybridHealthService/services/feedbacktype/feedback/read",
          "Microsoft.ADHybridHealthService/services/ipAddressAggregates/read",
          "Microsoft.ADHybridHealthService/services/ipAddressAggregateSettings/read",
          "Microsoft.ADHybridHealthService/services/ipAddressAggregateSettings/write",
          "Microsoft.ADHybridHealthService/services/metricmetadata/read",
          "Microsoft.ADHybridHealthService/services/metrics/groups/read",
          "Microsoft.ADHybridHealthService/services/metrics/groups/average/read",
          "Microsoft.ADHybridHealthService/services/metrics/groups/sum/read",
          "Microsoft.ADHybridHealthService/services/monitoringconfiguration/write",
          "Microsoft.ADHybridHealthService/services/monitoringconfigurations/read",
          "Microsoft.ADHybridHealthService/services/monitoringconfigurations/write",
          "Microsoft.ADHybridHealthService/services/premiumcheck/read",
          "Microsoft.ADHybridHealthService/services/reports/generateBlobUri/action",
          "Microsoft.ADHybridHealthService/services/reports/blobUris/read",
          "Microsoft.ADHybridHealthService/services/reports/details/read",
          "Microsoft.ADHybridHealthService/services/checkservicefeatureavailibility/read",
          "Microsoft.ADHybridHealthService/services/exporterrors/read",
          "Microsoft.ADHybridHealthService/services/exportstatus/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/delete",
          "Microsoft.ADHybridHealthService/services/servicemembers/alerts/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/credentials/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/datafreshness/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/exportstatus/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/metrics/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/metrics/groups/read",
          "Microsoft.ADHybridHealthService/services/servicemembers/serviceconfiguration/read",
          "Microsoft.ADHybridHealthService/services/tenantwhitelisting/read",
          "Microsoft.ADHybridHealthService/configuration/write",
          "Microsoft.ADHybridHealthService/configuration/read"
        ],
        "notActions": [],
        "dataActions": [],
        "notDataActions": []
      }
    ],
    "createdOn": "2025-05-02T17:10:56.62Z",
    "updatedOn": "2025-05-02T17:10:56.62Z",
    "createdBy": null,
    "updatedBy": null
  },
  "id": "/providers/Microsoft.Authorization/roleDefinitions/93629c8c-5d36-4533-85cd-f5bb3338710e",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "93629c8c-5d36-4533-85cd-f5bb3338710e"
}

Effective Permissions

Operations granted by this role (56 total)

Control Plane Operations (56)

Data Plane Operations (0)

No data plane operations granted