← cd ~/tools
// compare
Compare
Side-by-side comparisons of the permissions and roles people mix up most, generated from Microsoft's own definitions.
Graph permissions
- User.Read vs User.Read.All
- User.ReadBasic.All vs User.Read.All
- User.Read.All vs User.ReadWrite.All
- Directory.Read.All vs User.Read.All
- Directory.Read.All vs Directory.ReadWrite.All
- Group.Read.All vs GroupMember.Read.All
- Group.ReadWrite.All vs GroupMember.ReadWrite.All
- Sites.Read.All vs Sites.Selected
- Sites.ReadWrite.All vs Sites.Selected
- Files.Read.All vs Files.ReadWrite.All
- Mail.ReadBasic vs Mail.Read
- Mail.Read vs Mail.ReadWrite
- Mail.Send vs Mail.ReadWrite
- Application.Read.All vs Application.ReadWrite.All
- Application.ReadWrite.OwnedBy vs Application.ReadWrite.All
- Calendars.Read vs Calendars.ReadWrite
- Device.Read.All vs DeviceManagementManagedDevices.Read.All
- Policy.Read.All vs Policy.ReadWrite.ConditionalAccess
- RoleManagement.Read.Directory vs RoleManagement.ReadWrite.Directory
- AuditLog.Read.All vs Directory.Read.All
Microsoft Entra roles
- Application Administrator vs Cloud Application Administrator
- User Administrator vs Helpdesk Administrator
- Security Administrator vs Security Operator
- Security Operator vs Security Reader
- Global Reader vs Directory Readers
- Authentication Administrator vs Privileged Authentication Administrator
- Exchange Administrator vs Exchange Recipient Administrator
- Intune Administrator vs Cloud Device Administrator
- Conditional Access Administrator vs Security Administrator
- Privileged Role Administrator vs Global Administrator