What is the Entra ID Role Permission Explorer?

A free web-based tool that allows you to explore, compare, and analyze Microsoft Entra ID (formerly Azure AD) built-in role permissions. You can search permissions, compare roles side-by-side, and export data for security analysis.

How many Entra ID built-in roles are included?

The tool includes all Microsoft Entra ID built-in roles with their complete permission sets, sourced directly from Microsoft Graph API for accuracy and completeness.

Can I export the role permission data?

Yes, you can export individual role permissions or comparison results as CSV files for further analysis, documentation, or compliance reporting.

Is this tool free to use?

Yes, the Entra ID Role Permission Explorer is completely free to use. It's provided as a community resource by Microsoft MVP Kaido Järvemets.

Entra ID Role Permission Explorer - Free Tool by Kaido Järvemets

Welcome to Entra ID Role Explorer

Select a built-in role from the left sidebar to view its permissions, or use checkboxes to compare multiple roles.

Built-in Roles

Unique Permissions

Services Covered

📱 Mobile-Optimized View
Tap any role to view its permissions. Role comparison and export features are available on desktop devices.

Investigating Entra ID sign-ins? Watchtower does it in minutes.

Extract sign-in data from Graph API, organized into structured views for investigation. Built for security teams.

See Watchtower →

Quick Filters

Built-in Roles (0)

Welcome to Entra ID Role Explorer

Investigating Entra ID sign-ins? Watchtower does it in minutes.

Quick Filters

Built-in Roles (0)

Welcome to Entra ID Role Explorer

Investigating Entra ID sign-ins? Watchtower does it in minutes.

Done-for-You Solutions