Microsoft Entra ID · Entitlement Management
Access Package Manager
Can manage access packages within assigned catalogs.
Scope: Access package management within catalogs
Permissions
- Create and edit access packages
- Configure package policies and approvals
- Manage package assignments
- Cannot add resources to catalog
- Cannot manage catalog settings
Common use cases
- Day-to-day package administration
- Request and approval management
- Package policy updates
Best practices
- Assign to package administrators
- Coordinate with Catalog Owners on resources
Common questions
When should I assign the Access Package Manager role?
Assign Access Package Manager when you need to: Day-to-day package administration; Request and approval management; and Package policy updates. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Access Package Manager role do?
The Access Package Manager role grants permissions including: Create and edit access packages; Configure package policies and approvals; Manage package assignments; Cannot add resources to catalog; and Cannot manage catalog settings. See the Permissions section above for the full list.