Entra group, requiring Entra ID P1, that can be given directory roles because it was created with isAssignableToRole = true. Membership must be assigned, groups cannot nest, and the flag cannot be set afterwards.
Read more: Microsoft Learn
In the Ultra Transcenders books
AZ-104SC-500SC-900AB-900SC-300
Each book explains Role-assignable group in context, with comparison tables and the common traps.
Terms in this definition
- Entra ID P1
Conditional Access requires this Entra licence, as does protecting on-premises AD with Password Protection.
- Microsoft Entra roles
Administrative roles at tenant level, User Administrator for example, that manage objects in Entra but confer no rights over Azure resources, which Azure RBAC handles separately.
- Set
Secret permission in Key Vault for writing secrets; some older material refers to it as Create.