> For the complete documentation index, see [llms.txt](https://notes.incendium.rocks/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.incendium.rocks/pentesting-notes/cloud/azure/architecture/entra-id-roles.md).

# Entra ID roles

If all resources are RBAC/ABAC managed, who manages them? Well this is where Entra ID roles come in. Entra ID roles are applicable on Entra ID resources like users, groups, domains, licenses etc. There are many Administrator roles in Entra ID.

{% hint style="info" %}
The global administrator is the most well-known and all powerful administrator role
{% endhint %}

<figure><img src="/files/IdqfrE8SSLBfTfCsY7Th" alt=""><figcaption></figcaption></figure>

{% embed url="<https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference>" %}