| title | Attribute Provisioning Reader |
|---|---|
| description | Attribute Provisioning Reader |
| ms.topic | include |
| ms.date | 01/26/2026 |
| ms.custom | include file |
This is a privileged role. Assign the Attribute Provisioning Reader role to users who need to do the following tasks:
- Read the attribute mappings for custom security attributes when provisioning in an application.
- Read the provisioning and auditing logs for custom security attributes when provisioning in an application.
Users with this role can't read audit logs for other events. This role must be used with the Cloud Application Administrator or Application Administrator roles (from least to most privileged) to read provisioning configurations.
[!div class="mx-tableFixed"]
Actions Description microsoft.directory/servicePrincipals/synchronization.customSecurityAttributes/schema/read Read all custom security attributes in the synchronization schema