> For the complete documentation index, see [llms.txt](https://docs.cipp.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cipp.app/user-documentation/identity/administration/roles/role.md).

# View Individual Role

Everything CIPP knows about a single directory role, its assignments and its PIM configuration

This page opens one directory role from the [Roles & PIM](/user-documentation/identity/administration/roles.md) list and is where a review of who holds a role, and on what terms, is carried out. The header shows the role's display name and its role definition id, which can be copied, along with a **View in Entra** button that opens role management in the Microsoft Entra admin center. The display name is also a switcher, so another role can be opened without returning to the list: see [Entity Switcher](/user-documentation/shared-features/entity-switcher.md).

Two chips appear in the header where they apply. **Privileged** marks a role on CIPP's privileged-roles list, the same list the standards and alerts use. **Policy below floor** marks a role whose PIM settings are weaker than CIPP's secure floor. Both carry an explanation on hover.

A single tenant must be selected. With **All Tenants** selected the page explains that and shows nothing, because a role definition only means something in the context of one directory.

## Tabs

| Tab                                                                           | Description                                            |
| ----------------------------------------------------------------------------- | ------------------------------------------------------ |
| Overview                                                                      | The role's details and its assignments, covered below. |
| [PIM Settings](/user-documentation/identity/administration/roles/role/pim.md) | The assignment breakdown and the role's PIM policy.    |
| [Role Audit](/user-documentation/identity/administration/roles/role/audit.md) | Directory audit events recorded against this role.     |

## Role Details

A card on the left summarising the role itself.

| Field                                   | Description                                                                                                                                                              |
| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Description                             | What the role grants, as Entra describes it.                                                                                                                             |
| Role Definition ID                      | The role's identifier, used when matching templates and standards to a role.                                                                                             |
| Privileged Role                         | Whether the role is on CIPP's privileged-roles list. The help icon beside it lists the roles that qualify.                                                               |
| Members / Permanent / Eligible / Active | The four counts in one line: everyone holding the role, those holding it with no end date, those who can activate it through PIM, and those holding it with an end date. |

Beneath the role name the card states whether this is a built-in role or a custom one.

## Assignments

Every principal holding the role, one row per principal and scope.

### Table Details

| Column          | Description                                                                                                   |
| --------------- | ------------------------------------------------------------------------------------------------------------- |
| Principal       | The user, group or service principal holding the role.                                                        |
| UPN             | The principal's user principal name, where it has one.                                                        |
| Principal Type  | Whether the holder is a user, a group or a service principal.                                                 |
| Assignment Type | Permanent, Eligible, Active, or ActivatedFromEligible where an eligible administrator has activated the role. |
| Member Type     | Whether the role is held directly or inherited through a role-assignable group.                               |
| Scope           | The whole directory, or a single administrative unit.                                                         |
| End Date        | When the assignment expires, where it has an end.                                                             |

### Table Actions

These are the same assignment actions offered from the Roles & PIM list, described in full under [Roles & PIM](/user-documentation/identity/administration/roles.md#assignments), plus one addition.

<table><thead><tr><th>Action</th><th>Description</th><th data-type="checkbox">Bulk Action Available</th></tr></thead><tbody><tr><td>Convert to eligible</td><td>Replaces a permanent assignment with a PIM eligibility of the chosen lifetime.</td><td>true</td></tr><tr><td>Grant time-bound active assignment</td><td>Gives an eligible principal an active assignment that expires automatically.</td><td>true</td></tr><tr><td>Extend</td><td>Pushes out the end of a time-bound assignment or an eligibility.</td><td>true</td></tr><tr><td>Renew</td><td>Renews an expired time-bound assignment or eligibility.</td><td>true</td></tr><tr><td>Remove assignment</td><td>Removes the eligibility or the active assignment.</td><td>true</td></tr><tr><td>View sign-ins</td><td>Opens the holder's own page, where their sign-in activity can be reviewed. Greyed out for anything that is not a user.</td><td>false</td></tr></tbody></table>

***

## Feature Requests / Ideas

We value your feedback and ideas. Please raise any [feature requests](https://github.com/CyberDrain/CIPP/issues/new?template=feature.yml) on GitHub.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.cipp.app/user-documentation/identity/administration/roles/role.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.