aboutcloud.io
Find the minimum role for any Entra task
Task → Role
Describe any Entra admin task in plain language. Get back the minimum built-in role — nothing more.
Role diff
Select any two built-in roles. See every permission one has that the other lacks, side by side.
Always current
Data sourced from Microsoft's official documentation. Refreshed nightly.
How it works
- Type any Microsoft Entra admin task in plain language
- Results show the minimum built-in role required
- Click any result to see the full role permissions
- Use Role Diff to compare any two roles side by side
Results are sourced directly from Microsoft's official "least privileged by task" documentation, refreshed nightly. No AI — every result is deterministic.
Compare permissions between any two roles
Select any two Entra ID built-in roles to compare their permissions side by side. See exactly what one role can do that the other cannot.
How to use
How to use: Type a role name in each field — autocomplete will suggest matching roles. Or click one of the example comparisons above to get started instantly.
- Left column (red) — permissions only Role A has
- Center column (gray) — permissions both roles share
- Right column (green) — permissions only Role B has
Tip: compare a broad role (Global Administrator) against a scoped role (User Administrator) to find the minimum role for your use case.