An Entra role, not an Azure role, allowing basic directory information to be read. Members can already do that by default, though guests might require the role.
Also called Directory Readers.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Directory Reader in context, with comparison tables and the common traps.
Terms in this definition
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- Basic
Low-cost Log Analytics table plan where ingestion is cheap but each query is charged per GB and runs at workspace scope. Full KQL and simple log search alerts are supported; standard log search alerts are not.
- CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
Related terms
- Microsoft Sentinel Responder
Built-in Azure role combining Sentinel Reader rights with managing incidents, such as assigning owners and changing severity or status. Guests additionally need Directory Reader before they can assign incidents.