Microsoft Entra ID · Identity Governance

Attribute Provisioning Reader

Reads the provisioning configuration of custom security attributes for applications.

Scope: Read-only access to custom security attribute provisioning configuration

Permissions

  • Read custom security attributes in sync schema
  • Read provisioning logs for attributes

Common use cases

  • Reviewing attribute provisioning setup
  • Auditing attribute flows
  • Troubleshooting (read-only)

Best practices

  • Use for audit scenarios
  • Combine with higher roles for troubleshooting

Security considerations

  • Can see attribute configuration details

Official Microsoft Learn documentation →

Open the interactive RBACMap →