| title | Attribute Assignment Administrator |
|---|---|
| description | Attribute Assignment Administrator |
| ms.topic | include |
| ms.date | 01/26/2026 |
| ms.custom | include file |
Users with this role can assign and remove custom security attribute keys and values for supported Microsoft Entra objects such as users, service principals, and devices.
[!INCLUDE security-attributes-roles]
For more information, see Manage access to custom security attributes in Microsoft Entra ID.
[!div class="mx-tableFixed"]
Actions Description microsoft.directory/attributeSets/allProperties/read Read all properties of attribute sets microsoft.directory/azureManagedIdentities/customSecurityAttributes/read Read custom security attribute values for Microsoft Entra managed identities microsoft.directory/azureManagedIdentities/customSecurityAttributes/update Update custom security attribute values for Microsoft Entra managed identities microsoft.directory/customSecurityAttributeDefinitions/allProperties/read Read all properties of custom security attribute definitions microsoft.directory/devices/customSecurityAttributes/read Read custom security attribute values for devices microsoft.directory/devices/customSecurityAttributes/update Update custom security attribute values for devices microsoft.directory/servicePrincipals/customSecurityAttributes/read Read custom security attribute values for service principals microsoft.directory/servicePrincipals/customSecurityAttributes/update Update custom security attribute values for service principals microsoft.directory/users/customSecurityAttributes/read Read custom security attribute values for users microsoft.directory/users/customSecurityAttributes/update Update custom security attribute values for users