Microsoft Entra ID · B2C & External Identity
External ID User Flow Attribute Administrator
Creates and manages the attribute schema available to all user flows for external identities.
Scope: Manage attributes collected during external user registration
Permissions
- Create custom attributes
- Update attribute schema
- Delete attributes
- Manage attribute configuration
Common use cases
- Adding custom profile attributes
- Configuring required fields
- Managing attribute display
Best practices
- Plan attribute schema carefully
- Consider data privacy requirements
- Document attribute purposes
Security considerations
- Defines what data is collected
- Privacy implications for collected data
Common questions
When should I assign the External ID User Flow Attribute Administrator role?
Assign External ID User Flow Attribute Administrator when you need to: Adding custom profile attributes; Configuring required fields; and Managing attribute display. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the External ID User Flow Attribute Administrator role do?
The External ID User Flow Attribute Administrator role grants permissions including: Create custom attributes; Update attribute schema; Delete attributes; and Manage attribute configuration. See the Permissions section above for the full list.
What are the security risks of the External ID User Flow Attribute Administrator role?
Key considerations when assigning External ID User Flow Attribute Administrator: Defines what data is collected; and Privacy implications for collected data. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.