What is the Entra ID Permission Explorer?

A free web-based tool that allows you to select any Microsoft Entra ID permission and see which built-in roles have that permission. You can filter by service, view coverage statistics, and export data.

How does the Permission Explorer differ from the Role Explorer?

The Role Explorer lets you select a role and see its permissions. The Permission Explorer works in reverse: you select a permission and see which roles have it.

Can I export the permission analysis data?

Yes, you can export individual permission analyses or the complete permissions overview as CSV files for further analysis, documentation, or compliance reporting.

Is this tool free to use?

Yes, the Entra ID Permission Explorer is completely free to use. It's provided as a community resource by Microsoft MVP Kaido Järvemets.

Entra ID Permission Explorer - Which Roles Have Permissions

Permission Explorer: Select a permission below to see which of the 0 built-in roles have that permission.

Loading built-in roles and permissions...

Investigating Entra ID sign-ins? Watchtower does it in minutes.

Extract sign-in data from Graph API, organized into structured views for investigation. Built for security teams.

See Watchtower →

Permission Explorer

Investigating Entra ID sign-ins? Watchtower does it in minutes.

Done-for-You Solutions