The Role entity represents an Azure Active Directory (Entra ID) directory role.
| Field | Type | Possible Operators | Description |
|---|---|---|---|
| Guid | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique identifier for the entity in Forestall |
| ObjectID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Azure AD Object ID of the role |
| FSName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name used in Forestall |
| Description | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Description of the role |
| DisplayName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name of the role in Azure AD |
| Enabled | BOOLEAN | N/A (toggle) | Whether the role is enabled |
| IsAZPrivileged | BOOLEAN | N/A (toggle) | Whether the role grants privileged access in Azure |
| IsShadow | BOOLEAN | N/A (toggle) | Whether the role is a Shadow Admin role |
| IsAdmin | BOOLEAN | N/A (toggle) | Whether the role grants admin privileges |
| IsBuiltIn | BOOLEAN | N/A (toggle) | Whether the role is a built-in Azure AD role |
| RoleTemplateID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Template ID of the directory role |
| TenantID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Azure AD Tenant ID the role belongs to |
| RolePermissionsAllowed | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Permissions allowed by the role |
| AZTier | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Azure tier classification assigned by Forestall |