Entra role able to read audit and sign-in reports. Because the administrator SSPR policy does not cover it, those holding it are subject to the ordinary user SSPR policy.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Reports Reader in context, with comparison tables and the common traps.
Terms in this definition
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- Audit
Policy effect that lets a request proceed but flags the resource as non-compliant and logs a warning to the activity log. Microsoft suggests beginning there and later moving to something enforcing, like Deny.
- SSPR
Allows users to unlock or reset their own passwords with methods they have registered. It can apply to All users, None, or Selected (a single group, with nesting supported).
- Exclusions
Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
Related terms
- Microsoft Entra Health
An area of Microsoft Entra for monitoring service health, giving near-real-time signals and anomaly alerts for scenarios like MFA and compliant-device sign-ins (preview), plus monthly SLA attainment. Viewing it requires Reports Reader or higher.
- Sign-in logs
Entra keeps a log of every sign-in by people, service principals and managed identities. Admins (Reports Reader or higher) open it under Monitoring & health to work out why sign-ins failed and which Conditional Access policies were applied.