# Entra role-assignable groups - **Tenant:** 912e9bd6-236e-46f5-9c0c-b99867e6b99b - **Generated (UTC):** 2026-10-14T23:31:24.6459720Z - **Groups with directory-role assignments:** 34 Lists directory roles assigned or eligible to each group and the selected PIM activation-policy settings. Group membership schedules are not collected. ## Contents - [BCCC: Role - IT Technician](#group-a0fa904b-20f2-43e7-b2d6-f9defb0526d6) - [BRICC: Role - IT Technician](#group-a77e405f-7718-4af1-9421-495c6bedb6db) - [CCM: IT Administrators](#group-72614055-3486-47f0-b44e-7f46803212fe) - [CCM: IT Technicians](#group-672e071c-989a-426c-9827-6d0a28b5e5f1) - [CCM: K12 Solutions Staff](#group-6d082ca8-8b31-41eb-b6da-c70b91d14a5a) - [CCM: Role - Cloud App Administrator](#group-6d459452-db6d-4028-a0d8-fcee3bcd3b3a) - [CCM: Role - Entra Application Administrator](#group-f918b613-fa2e-4b19-860e-67dac52f792c) - [CCM: Role - Exchange Administrator](#group-9e1789f3-40f1-47c4-9bcf-8a0ba63000fa) - [CCM: Role - Global Administrator](#group-a6b2d667-c2b6-4c7b-a036-7ad485fcf987) - [CCM: Role - Microsoft Application Administrator](#group-4d4b888e-2c89-49a0-a655-e3b5636ed920) - [CCM: Role - People Administrator](#group-2b0b1499-8dcb-4119-946d-417005a83841) - [CCM: Role - Purview Workload](#group-9458c03e-5f03-44c5-8f60-a9c5935cbb14) - [CCM: Role - SharePoint Administrator](#group-9df37d56-3961-4917-8d77-98f149ac7f8f) - [CCM: Role - Teams Administrator](#group-3ac3b306-871b-4511-917e-05f0fc41c781) - [CCM: Role - Teams Configuration Reader](#group-0ee1c984-5ba2-4adc-8cc9-cd631dd81b3a) - [CCMCO: Role - IT Technician](#group-bfd2597c-898f-43db-9d7f-4f3d82aab62f) - [CHICC: Role - IT Technician](#group-afd021c1-c7d3-482e-a6b9-bf691762353e) - [CORCC: Role - IT Technician](#group-ebec12ba-a41d-432f-bcad-87f7b977bbb4) - [DALCC: Role - IT Technician](#group-9fa8672d-a469-43dd-a772-8fa674030af9) - [DUNCC: Role - IT Technician](#group-effd11bc-0376-4b4c-8037-016898b7ce0a) - [ENDCC: Role - IT Technician](#group-1fffa561-d165-435d-990e-c247f23a7a09) - [ENDCC: Student Password Administrators](#group-5fa4b0a9-7faa-4a50-8391-ce62061e567a) - [GROCC: DE Password Administrators](#group-2f947a04-8d2b-43b5-9ea3-e26432667fba) - [GROCC: Role - IT Technician](#group-f0cc2142-8342-4e91-be46-2039754b3302) - [HOPCC: Role - IT Technician](#group-6b1e58c3-dc43-4ea3-9ad0-92ffebfb04c5) - [LIVCC: Role - IT Technician](#group-f42ab487-0032-4ae4-bbfd-d77b7241888e) - [RIVCC: Password Administrator](#group-7a41b9fd-ef01-4a56-bf89-e358909834c1) - [RIVCC: Role - IT Technician](#group-c7dd831a-4725-4552-a928-7eb3a01712a3) - [SEACC: Role - IT Technician](#group-fae05a52-3602-41ea-98e0-14b493fe5fa7) - [STAMC: Role - IT Technician](#group-8dd03cf6-25cc-42ab-8c8b-14b73504f24a) - [TLCC: Role - IT Technician](#group-de8ae7db-0cf5-4117-980c-1b379d6401b1) - [WARCC: Role - IT Technician](#group-5f2419b7-fba0-4d41-871c-a9ecb906af06) - [WARCC: Student Password Reset Users](#group-889443b4-c627-45d2-87bc-2960bde2b915) - [WHICC: Role - IT Technician](#group-b5d4d393-f765-4f30-b686-f0b608e60368) ## Group a0fa904b-20f2-43e7-b2d6-f9defb0526d6 - **Display name:** BCCC: Role - IT Technician - **Group ID:** `a0fa904b-20f2-43e7-b2d6-f9defb0526d6` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | BCCC: Students | | User Administrator | Active | Direct | BCCC: Staff | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | BCCC: Students | | Cloud Device Administrator | Active | Direct | BCCC: Devices | | User Administrator | Active | Direct | BCCC: Other | | LAPS Password Viewer | Active | Direct | BCCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | BCCC: Devices | | Groups Administrator | Active | Direct | BCCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | BCCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group a77e405f-7718-4af1-9421-495c6bedb6db - **Display name:** BRICC: Role - IT Technician - **Group ID:** `a77e405f-7718-4af1-9421-495c6bedb6db` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | BRICC: Students | | User Administrator | Active | Direct | BRICC: Staff | | Authentication Administrator | Active | Direct | BRICC: Students | | Cloud Device Administrator | Active | Direct | BRICC: Devices | | Groups Administrator | Active | Direct | BRICC: Groups | | User Administrator | Active | Direct | BRICC: Other | | LAPS Password Viewer | Active | Direct | BRICC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | BRICC: Devices | | Reports Reader | Active | Direct | Tenant-wide | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | BRICC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 72614055-3486-47f0-b44e-7f46803212fe - **Display name:** CCM: IT Administrators - **Group ID:** `72614055-3486-47f0-b44e-7f46803212fe` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active _None found._ ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Application Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | — | PT8H | Justification | False | — | | — | PT8H | Justification | False | — | ## Group 672e071c-989a-426c-9827-6d0a28b5e5f1 - **Display name:** CCM: IT Technicians - **Group ID:** `672e071c-989a-426c-9827-6d0a28b5e5f1` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Windows Update Deployment Administrator | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | — | PT8H | Justification | False | — | | — | PT8H | Justification | False | — | ## Group 6d082ca8-8b31-41eb-b6da-c70b91d14a5a - **Display name:** CCM: K12 Solutions Staff - **Group ID:** `6d082ca8-8b31-41eb-b6da-c70b91d14a5a` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Directory Readers | Active | Direct | Tenant-wide | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | User Administrator | Eligible | Direct | Tenant-wide | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Cloud Application Administrator | Eligible | Direct | Tenant-wide | PT8H | — | MultiFactorAuthentication, Justification | False | — | | Hybrid Identity Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | — | PT8H | Justification | False | — | | — | PT8H | Justification | False | — | ## Group 6d459452-db6d-4028-a0d8-fcee3bcd3b3a - **Display name:** CCM: Role - Cloud App Administrator - **Group ID:** `6d459452-db6d-4028-a0d8-fcee3bcd3b3a` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Cloud App Security Administrator | Active | Direct | Tenant-wide | | Cloud Application Administrator | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | Ticketing | False | — | | — | PT8H | Justification | False | — | ## Group f918b613-fa2e-4b19-860e-67dac52f792c - **Display name:** CCM: Role - Entra Application Administrator - **Group ID:** `f918b613-fa2e-4b19-860e-67dac52f792c` - **Description:** Manages Entra App Registrations and Enterprise Apps - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Application Administrator | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | Ticketing | False | — | | — | PT8H | Justification | False | — | ## Group 9e1789f3-40f1-47c4-9bcf-8a0ba63000fa - **Display name:** CCM: Role - Exchange Administrator - **Group ID:** `9e1789f3-40f1-47c4-9bcf-8a0ba63000fa` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Exchange Administrator | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | — | PT8H | Justification | False | — | | — | PT8H | Justification | False | — | ## Group a6b2d667-c2b6-4c7b-a036-7ad485fcf987 - **Display name:** CCM: Role - Global Administrator - **Group ID:** `a6b2d667-c2b6-4c7b-a036-7ad485fcf987` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Global Administrator | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | Justification | True | {"ApprovalMode":"SingleStage","ApprovalStages":[{"ApprovalStageTimeOutInDays":1,"IsApproverJustificationRequired":true,"IsEscalationEnabled":false,"EscalationTimeInMinutes":0,"PrimaryApprovers":[{"@odata.type":"#microsoft.graph.singleUser","userId":"f5ddaa34-f614-4fe7-979d-24caec7bc452","description":"Joshua Lyndon"},{"@odata.type":"#microsoft.graph.singleUser","userId":"fd64403b-ae9f-43e2-b5e8-bffe5c057a26","description":"Jason Treadwell"},{"@odata.type":"#microsoft.graph.singleUser","userId":"5b3d76ef-aa28-436b-b8ee-4e2160593b54","description":"Cameron Weir"}],"EscalationApprovers":[]}]} | | — | PT8H | Justification | False | — | ## Group 4d4b888e-2c89-49a0-a655-e3b5636ed920 - **Display name:** CCM: Role - Microsoft Application Administrator - **Group ID:** `4d4b888e-2c89-49a0-a655-e3b5636ed920` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active _None found._ ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | SharePoint Administrator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | — | True | {"ApprovalMode":"SingleStage","ApprovalStages":[{"ApprovalStageTimeOutInDays":1,"IsApproverJustificationRequired":true,"IsEscalationEnabled":false,"EscalationTimeInMinutes":0,"PrimaryApprovers":[{"@odata.type":"#microsoft.graph.singleUser","userId":"5b3d76ef-aa28-436b-b8ee-4e2160593b54","description":"Cameron Weir"},{"@odata.type":"#microsoft.graph.singleUser","userId":"fd64403b-ae9f-43e2-b5e8-bffe5c057a26","description":"Jason Treadwell"},{"@odata.type":"#microsoft.graph.singleUser","userId":"f5ddaa34-f614-4fe7-979d-24caec7bc452","description":"Joshua Lyndon"}],"EscalationApprovers":[]}]} | | Edge Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Ticketing | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | Ticketing | False | — | | — | PT8H | Justification | False | — | ## Group 2b0b1499-8dcb-4119-946d-417005a83841 - **Display name:** CCM: Role - People Administrator - **Group ID:** `2b0b1499-8dcb-4119-946d-417005a83841` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | People Administrator | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 9458c03e-5f03-44c5-8f60-a9c5935cbb14 - **Display name:** CCM: Role - Purview Workload - **Group ID:** `9458c03e-5f03-44c5-8f60-a9c5935cbb14` - **Description:** Read by default; activate Write or Administrator as required. - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Purview Workload Content Reader | Active | Direct | Tenant-wide | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Purview Workload Content Writer | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | | Purview Workload Content Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | Ticketing | False | — | | — | PT8H | Justification | False | — | ## Group 9df37d56-3961-4917-8d77-98f149ac7f8f - **Display name:** CCM: Role - SharePoint Administrator - **Group ID:** `9df37d56-3961-4917-8d77-98f149ac7f8f` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | SharePoint Administrator | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | Ticketing | False | — | | — | PT8H | Justification | False | — | ## Group 3ac3b306-871b-4511-917e-05f0fc41c781 - **Display name:** CCM: Role - Teams Administrator - **Group ID:** `3ac3b306-871b-4511-917e-05f0fc41c781` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Teams Administrator | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | Ticketing | False | — | | — | PT8H | Justification | False | — | ## Group 0ee1c984-5ba2-4adc-8cc9-cd631dd81b3a - **Display name:** CCM: Role - Teams Configuration Reader - **Group ID:** `0ee1c984-5ba2-4adc-8cc9-cd631dd81b3a` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | Teams Reader | Active | Direct | Tenant-wide | ### Directory roles — eligible _None found._ ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | Ticketing | False | — | | — | PT8H | Justification | False | — | ## Group bfd2597c-898f-43db-9d7f-4f3d82aab62f - **Display name:** CCMCO: Role - IT Technician - **Group ID:** `bfd2597c-898f-43db-9d7f-4f3d82aab62f` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | Tenant-wide | | Reports Reader | Active | Direct | Tenant-wide | | Cloud Device Administrator | Active | Direct | Tenant-wide | | Security Operator | Active | Direct | Tenant-wide | | Global Reader | Active | Direct | Tenant-wide | | Groups Administrator | Active | Direct | Tenant-wide | | LAPS Password Viewer | Active | Direct | Tenant-wide | | Bitlocker Recovery Key Reader | Active | Direct | Tenant-wide | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Privileged Role Administrator | Eligible | Direct | Tenant-wide | PT8H | — | MultiFactorAuthentication, Justification | False | — | | Intune Administrator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Authentication Administrator | Eligible | Direct | Tenant-wide | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Passkey + Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group afd021c1-c7d3-482e-a6b9-bf691762353e - **Display name:** CHICC: Role - IT Technician - **Group ID:** `afd021c1-c7d3-482e-a6b9-bf691762353e` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | CHICC: Staff | | User Administrator | Active | Direct | CHICC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | CHICC: Students | | User Administrator | Active | Direct | CHICC: Other | | Cloud Device Administrator | Active | Direct | CHICC: Devices | | LAPS Password Viewer | Active | Direct | CHICC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | CHICC: Devices | | Groups Administrator | Active | Direct | CHICC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | CHICC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group ebec12ba-a41d-432f-bcad-87f7b977bbb4 - **Display name:** CORCC: Role - IT Technician - **Group ID:** `ebec12ba-a41d-432f-bcad-87f7b977bbb4` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | CORCC: Staff | | User Administrator | Active | Direct | CORCC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | CORCC: Students | | Cloud Device Administrator | Active | Direct | CORCC: Devices | | User Administrator | Active | Direct | CORCC: Other | | LAPS Password Viewer | Active | Direct | CORCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | CORCC: Devices | | Groups Administrator | Active | Direct | CORCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | CORCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 9fa8672d-a469-43dd-a772-8fa674030af9 - **Display name:** DALCC: Role - IT Technician - **Group ID:** `9fa8672d-a469-43dd-a772-8fa674030af9` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | DALCC: Staff | | User Administrator | Active | Direct | DALCC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | DALCC: Students | | Cloud Device Administrator | Active | Direct | DALCC: Devices | | User Administrator | Active | Direct | DALCC: Other | | LAPS Password Viewer | Active | Direct | DALCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | DALCC: Devices | | Groups Administrator | Active | Direct | DALCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | DALCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group effd11bc-0376-4b4c-8037-016898b7ce0a - **Display name:** DUNCC: Role - IT Technician - **Group ID:** `effd11bc-0376-4b4c-8037-016898b7ce0a` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | DUNCC: Staff | | User Administrator | Active | Direct | DUNCC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | DUNCC: Students | | Cloud Device Administrator | Active | Direct | DUNCC: Devices | | User Administrator | Active | Direct | DUNCC: Other | | LAPS Password Viewer | Active | Direct | DUNCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | DUNCC: Devices | | Groups Administrator | Active | Direct | DUNCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | DUNCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 1fffa561-d165-435d-990e-c247f23a7a09 - **Display name:** ENDCC: Role - IT Technician - **Group ID:** `1fffa561-d165-435d-990e-c247f23a7a09` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | ENDCC: Staff | | User Administrator | Active | Direct | ENDCC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Cloud Device Administrator | Active | Direct | ENDCC: Devices | | Authentication Administrator | Active | Direct | ENDCC: Students | | User Administrator | Active | Direct | ENDCC: Other | | LAPS Password Viewer | Active | Direct | ENDCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | ENDCC: Devices | | Groups Administrator | Active | Direct | ENDCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | ENDCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 5fa4b0a9-7faa-4a50-8391-ce62061e567a - **Display name:** ENDCC: Student Password Administrators - **Group ID:** `5fa4b0a9-7faa-4a50-8391-ce62061e567a` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active _None found._ ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Password Administrator | Eligible | Direct | ENDCC: Students | No expiration | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | — | PT8H | Justification | False | — | | — | PT8H | Justification | False | — | ## Group 2f947a04-8d2b-43b5-9ea3-e26432667fba - **Display name:** GROCC: DE Password Administrators - **Group ID:** `2f947a04-8d2b-43b5-9ea3-e26432667fba` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active _None found._ ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Password Administrator | Eligible | Direct | GROCC: DE Students | No expiration | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | — | PT8H | Justification | False | — | | — | PT8H | Justification | False | — | ## Group f0cc2142-8342-4e91-be46-2039754b3302 - **Display name:** GROCC: Role - IT Technician - **Group ID:** `f0cc2142-8342-4e91-be46-2039754b3302` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | GROCC: Day School Students | | User Administrator | Active | Direct | GROCC: DE Students | | Reports Reader | Active | Direct | Tenant-wide | | User Administrator | Active | Direct | GROCC: Staff | | User Administrator | Active | Direct | GROCC: Other | | Cloud Device Administrator | Active | Direct | GROCC: Devices | | Authentication Administrator | Active | Direct | GROCC: Day School Students | | Authentication Administrator | Active | Direct | GROCC: DE Students | | LAPS Password Viewer | Active | Direct | GROCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | GROCC: Devices | | Groups Administrator | Active | Direct | GROCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | GROCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 6b1e58c3-dc43-4ea3-9ad0-92ffebfb04c5 - **Display name:** HOPCC: Role - IT Technician - **Group ID:** `6b1e58c3-dc43-4ea3-9ad0-92ffebfb04c5` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | HOPCC: Staff | | User Administrator | Active | Direct | HOPCC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | HOPCC: Students | | Cloud Device Administrator | Active | Direct | HOPCC: Devices | | User Administrator | Active | Direct | HOPCC: Other | | LAPS Password Viewer | Active | Direct | HOPCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | HOPCC: Devices | | Groups Administrator | Active | Direct | HOPCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | HOPCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group f42ab487-0032-4ae4-bbfd-d77b7241888e - **Display name:** LIVCC: Role - IT Technician - **Group ID:** `f42ab487-0032-4ae4-bbfd-d77b7241888e` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | LIVCC: Staff | | User Administrator | Active | Direct | LIVCC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | LIVCC: Students | | Cloud Device Administrator | Active | Direct | LIVCC: Devices | | User Administrator | Active | Direct | LIVCC: Other | | LAPS Password Viewer | Active | Direct | LIVCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | LIVCC: Devices | | Groups Administrator | Active | Direct | LIVCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | LIVCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 7a41b9fd-ef01-4a56-bf89-e358909834c1 - **Display name:** RIVCC: Password Administrator - **Group ID:** `7a41b9fd-ef01-4a56-bf89-e358909834c1` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active _None found._ ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Password Administrator | Eligible | Direct | RIVCC: Students | No expiration | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | — | PT8H | Justification | False | — | | — | PT8H | Justification | False | — | ## Group c7dd831a-4725-4552-a928-7eb3a01712a3 - **Display name:** RIVCC: Role - IT Technician - **Group ID:** `c7dd831a-4725-4552-a928-7eb3a01712a3` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | RIVCC: Students | | User Administrator | Active | Direct | RIVCC: Staff | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | RIVCC: Students | | Cloud Device Administrator | Active | Direct | RIVCC: Devices | | User Administrator | Active | Direct | RIVCC: Other | | LAPS Password Viewer | Active | Direct | RIVCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | RIVCC: Devices | | Groups Administrator | Active | Direct | RIVCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | RIVCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group fae05a52-3602-41ea-98e0-14b493fe5fa7 - **Display name:** SEACC: Role - IT Technician - **Group ID:** `fae05a52-3602-41ea-98e0-14b493fe5fa7` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | SEACC: Staff | | User Administrator | Active | Direct | SEACC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | SEACC: Students | | Cloud Device Administrator | Active | Direct | SEACC: Devices | | User Administrator | Active | Direct | SEACC: Other | | LAPS Password Viewer | Active | Direct | SEACC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | SEACC: Devices | | Groups Administrator | Active | Direct | SEACC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | SEACC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 8dd03cf6-25cc-42ab-8c8b-14b73504f24a - **Display name:** STAMC: Role - IT Technician - **Group ID:** `8dd03cf6-25cc-42ab-8c8b-14b73504f24a` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | STAMC: Staff | | User Administrator | Active | Direct | STAMC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | STAMC: Students | | Cloud Device Administrator | Active | Direct | STAMC: Devices | | User Administrator | Active | Direct | STAMC: Other | | LAPS Password Viewer | Active | Direct | STAMC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | STAMC: Devices | | Groups Administrator | Active | Direct | STAMC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | STAMC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group de8ae7db-0cf5-4117-980c-1b379d6401b1 - **Display name:** TLCC: Role - IT Technician - **Group ID:** `de8ae7db-0cf5-4117-980c-1b379d6401b1` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | TLCC: Students | | User Administrator | Active | Direct | TLCC: Staff | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | TLCC: Students | | Cloud Device Administrator | Active | Direct | TLCC: Devices | | User Administrator | Active | Direct | TLCC: Other | | LAPS Password Viewer | Active | Direct | TLCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | TLCC: Devices | | Groups Administrator | Active | Direct | TLCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | TLCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 5f2419b7-fba0-4d41-871c-a9ecb906af06 - **Display name:** WARCC: Role - IT Technician - **Group ID:** `5f2419b7-fba0-4d41-871c-a9ecb906af06` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | WARCC: Staff | | User Administrator | Active | Direct | WARCC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | WARCC: Students | | Cloud Device Administrator | Active | Direct | WARCC: Devices | | User Administrator | Active | Direct | WARCC: Other | | LAPS Password Viewer | Active | Direct | WARCC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | WARCC: Devices | | Groups Administrator | Active | Direct | WARCC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | WARCC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — | ## Group 889443b4-c627-45d2-87bc-2960bde2b915 - **Display name:** WARCC: Student Password Reset Users - **Group ID:** `889443b4-c627-45d2-87bc-2960bde2b915` - **Description:** Members can elevate to the Password Administrator role for the WARCC: Students AU - **Mail enabled / security enabled:** False / True ### Directory roles — active _None found._ ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Password Administrator | Eligible | Direct | WARCC: Students | No expiration | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | — | PT8H | Justification | False | — | | — | PT8H | Justification | False | — | ## Group b5d4d393-f765-4f30-b686-f0b608e60368 - **Display name:** WHICC: Role - IT Technician - **Group ID:** `b5d4d393-f765-4f30-b686-f0b608e60368` - **Description:** — - **Mail enabled / security enabled:** False / True ### Directory roles — active | RoleName | AssignmentType | MemberType | ScopeDisplayName | | --- | --- | --- | --- | | User Administrator | Active | Direct | WHICC: Staff | | User Administrator | Active | Direct | WHICC: Students | | Reports Reader | Active | Direct | Tenant-wide | | Authentication Administrator | Active | Direct | WHICC: Students | | User Administrator | Active | Direct | WHICC: Other | | Cloud Device Administrator | Active | Direct | WHICC: Devices | | LAPS Password Viewer | Active | Direct | WHICC: Devices | | Bitlocker Recovery Key Reader | Active | Direct | WHICC: Devices | | Groups Administrator | Active | Direct | WHICC: Groups | ### Directory roles — eligible | RoleName | AssignmentType | MemberType | ScopeDisplayName | MaximumActivationDuration | AuthenticationContext | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Authentication Administrator | Eligible | Direct | WHICC: Staff | No expiration | — | MultiFactorAuthentication, Justification | False | — | | Security Operator | Eligible | Direct | Tenant-wide | No expiration | Passkey + Compliant + School Located | Ticketing | False | — | | Groups Administrator | Eligible | Direct | Tenant-wide | No expiration | — | Justification | False | — | | Exchange Recipient Administrator | Eligible | Direct | Tenant-wide | PT8H | — | Justification | False | — | ### Eligible group-membership activation policy settings | AuthenticationContext | MaximumActivationDuration | RequiredInformation | ApprovalRequired | ApprovalSettings | | --- | --- | --- | --- | --- | | Compliant + School Located | No expiration | — | False | — | | — | PT8H | Justification | False | — |