Role Information
Details and metadata
cd7709b9-d129-4dc4-ac27-d215a1be1e07
Change History
Track all modifications to this role since 2025-12-15 01:08:16+00:00
Updated On
Event Type
Summary & Details
2025-05-05 15:00:32
Initial Scan
Show full JSON
{
"properties": {
"roleName": "Subscription Migrator",
"type": "BuiltInRole",
"description": "Can perform operations related to the transfer of managed identities and their associated authorization policies from one Entra ID tenant to another",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.ManagedIdentity/migrateIdentities/action",
"Microsoft.Authorization/migrateRbac/action",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/denyAssignments/read",
"Microsoft.Authorization/roleDefinitions/read",
"Microsoft.managedIdentities/identities/read",
"Microsoft.managedIdentities/userAssignedIdentities/read",
"Microsoft.KeyVault.vaults/accessPolicies/read",
"Microsoft.Authorization/policyAssignments/read",
"Microsoft.Authorization/policyDefinitions/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2024-08-05T15:09:29.21Z",
"updatedOn": "2025-05-05T15:00:32.598Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/cd7709b9-d129-4dc4-ac27-d215a1be1e07",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "cd7709b9-d129-4dc4-ac27-d215a1be1e07"
}
2025-05-05 15:00:32
Initial Scan
View details
{
"properties": {
"roleName": "Subscription Migrator",
"type": "BuiltInRole",
"description": "Can perform operations related to the transfer of managed identities and their associated authorization policies from one Entra ID tenant to another",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.ManagedIdentity/migrateIdentities/action",
"Microsoft.Authorization/migrateRbac/action",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/denyAssignments/read",
"Microsoft.Authorization/roleDefinitions/read",
"Microsoft.managedIdentities/identities/read",
"Microsoft.managedIdentities/userAssignedIdentities/read",
"Microsoft.KeyVault.vaults/accessPolicies/read",
"Microsoft.Authorization/policyAssignments/read",
"Microsoft.Authorization/policyDefinitions/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2024-08-05T15:09:29.21Z",
"updatedOn": "2025-05-05T15:00:32.598Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/cd7709b9-d129-4dc4-ac27-d215a1be1e07",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "cd7709b9-d129-4dc4-ac27-d215a1be1e07"
}
Latest Role JSON
Raw definition from Azure
{
"properties": {
"roleName": "Subscription Migrator",
"type": "BuiltInRole",
"description": "Can perform operations related to the transfer of managed identities and their associated authorization policies from one Entra ID tenant to another",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [
"Microsoft.ManagedIdentity/migrateIdentities/action",
"Microsoft.Authorization/migrateRbac/action",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/denyAssignments/read",
"Microsoft.Authorization/roleDefinitions/read",
"Microsoft.managedIdentities/identities/read",
"Microsoft.managedIdentities/userAssignedIdentities/read",
"Microsoft.KeyVault.vaults/accessPolicies/read",
"Microsoft.Authorization/policyAssignments/read",
"Microsoft.Authorization/policyDefinitions/read"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
],
"createdOn": "2024-08-05T15:09:29.21Z",
"updatedOn": "2025-05-05T15:00:32.598Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/cd7709b9-d129-4dc4-ac27-d215a1be1e07",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "cd7709b9-d129-4dc4-ac27-d215a1be1e07"
}