← cd ~/compare
// compare · entra roles
Reports Reader vs Usage Summary Reports Reader
Two Microsoft Entra built-in roles that are often confused, compared permission by permission.
In short: Reports Reader has 7 permissions. Usage Summary Reports Reader has 3 permissions. Assign the one with less access that still covers the job.
| Detail | Reports Reader | Usage Summary Reports Reader |
|---|---|---|
| What Microsoft says | Can read sign-in and audit reports. | Read Usage reports and Adoption Score, but can't access user details. |
| Size | 7 permissions | 3 permissions |
Permissions only Reports Reader lists (5)
microsoft.azure.serviceHealth/allEntities/allTasksmicrosoft.directory/auditLogs/allProperties/readmicrosoft.directory/provisioningLogs/allProperties/readmicrosoft.directory/signInReports/allProperties/readmicrosoft.office365.usageReports/allEntities/allProperties/read
Permissions only Usage Summary Reports Reader lists (1)
microsoft.office365.usageReports/allEntities/standard/read
Permissions are listed as Microsoft writes them. A broad one, such as one ending in allTasks, can cover several narrower ones listed for the other role.
Reports Reader explained Usage Summary Reports Reader explained
Spotted something out of date or wrong? Tell us and we'll fix it.