Microsoft Entra ID · Entitlement Management
Catalog Owner
Can manage catalogs and access packages within their assigned catalogs.
Scope: Catalog-level administration
Permissions
- Add resources to catalog
- Create and manage access packages in catalog
- Assign catalog roles to others
- Configure package policies
- Cannot create new catalogs
Common use cases
- Department-level access management
- Business unit self-service configuration
- Project-based access packages
Best practices
- Assign to business unit owners
- Delegate package creation to appropriate staff
- Review catalog resources periodically
Common questions
When should I assign the Catalog Owner role?
Assign Catalog Owner when you need to: Department-level access management; Business unit self-service configuration; and Project-based access packages. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Catalog Owner role do?
The Catalog Owner role grants permissions including: Add resources to catalog; Create and manage access packages in catalog; Assign catalog roles to others; Configure package policies; and Cannot create new catalogs. See the Permissions section above for the full list.