Role

The Role entity represents an Azure Active Directory (Entra ID) directory role.

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique identifier for the entity in Forestall
ObjectID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Azure AD Object ID of the role
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name used in Forestall
Description	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Description of the role
DisplayName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name of the role in Azure AD
Enabled	BOOLEAN	N/A (toggle)	Whether the role is enabled
IsAZPrivileged	BOOLEAN	N/A (toggle)	Whether the role grants privileged access in Azure
IsShadow	BOOLEAN	N/A (toggle)	Whether the role is a Shadow Admin role
IsAdmin	BOOLEAN	N/A (toggle)	Whether the role grants admin privileges
IsBuiltIn	BOOLEAN	N/A (toggle)	Whether the role is a built-in Azure AD role
RoleTemplateID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Template ID of the directory role
TenantID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Azure AD Tenant ID the role belongs to
RolePermissionsAllowed	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Permissions allowed by the role
AZTier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Azure tier classification assigned by Forestall