Skip to content
← Back to the guide

Entra ID custom roles

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 4

Entra ID custom roles

How to design and assign custom administrative roles in Microsoft Entra ID for fine-grained least-privilege access.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-custom-roles

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 4
01

When should I create a custom role in Entra ID?

When a built-in role grants far more than the task needs — for example an app owner who needs to update credentials on specific app registrations but not manage every app. Custom roles select individual permissions and…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-custom-roles

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 4
02

What licence do custom roles need?

Entra ID P1 for the users assigned a custom role. Creating the role definition itself does not need a licence.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-custom-roles

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 4
03

What can custom roles not do?

Custom roles cover a subset of resource types — app registrations, enterprise apps, users, groups, devices, and a growing list — but not every permission a built-in role has. If the permission you need is not in the lis…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-custom-roles

Slide 4Download PNG

Auto-generated from Entra ID custom roles. This page is not indexed and isn't part of the guide itself.