Skip to content

Update Entra ID role definitions#1811

Open
maester-bot[bot] wants to merge 1 commit into
mainfrom
auto/update-role-definitions
Open

Update Entra ID role definitions#1811
maester-bot[bot] wants to merge 1 commit into
mainfrom
auto/update-role-definitions

Conversation

@maester-bot
Copy link
Copy Markdown

@maester-bot maester-bot Bot commented Jun 1, 2026

Automated update of Entra ID built-in role definitions from the
Microsoft permissions reference.

Updates:

  • powershell/internal/Get-MtRoleInfo.ps1 (role hashtable with GUIDs and privileged flags)

Diff summary

Privilege classification changes (1)

  • IdentityGovernanceAdministrator: standard → privileged

Total roles: 140 (33 privileged, 107 standard)

Please review any added/removed roles before merging.

@maester-bot maester-bot Bot requested a review from a team as a code owner June 1, 2026 13:42
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Jun 1, 2026

Deploying maester with  Cloudflare Pages  Cloudflare Pages

Latest commit: b27f3a2
Status: ✅  Deploy successful!
Preview URL: https://37a6471d.maester.pages.dev
Branch Preview URL: https://auto-update-role-definitions.maester.pages.dev

View logs

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the internal Entra ID built-in role definitions mapping to reflect Microsoft’s current privileged-role classification, which is used by Maester when reasoning about role risk/privilege.

Changes:

  • Reclassifies IdentityGovernanceAdministrator from standard to privileged (IsPrivileged = $true).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants