> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/azure-entities/entra-id/role.md).

# Role

The **Role** entity represents an Azure Active Directory (Entra ID) directory role.

| Field                  | Type    | Possible Operators                                             | Description                                        |
| ---------------------- | ------- | -------------------------------------------------------------- | -------------------------------------------------- |
| Guid                   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier for the entity in Forestall      |
| ObjectID               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure AD Object ID of the role                     |
| FSName                 | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used in Forestall                     |
| Description            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Description of the role                            |
| DisplayName            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name of the role in Azure AD               |
| Enabled                | BOOLEAN | N/A (toggle)                                                   | Whether the role is enabled                        |
| IsAZPrivileged         | BOOLEAN | N/A (toggle)                                                   | Whether the role grants privileged access in Azure |
| IsShadow               | BOOLEAN | N/A (toggle)                                                   | Whether the role is a Shadow Admin role            |
| IsAdmin                | BOOLEAN | N/A (toggle)                                                   | Whether the role grants admin privileges           |
| IsBuiltIn              | BOOLEAN | N/A (toggle)                                                   | Whether the role is a built-in Azure AD role       |
| RoleTemplateID         | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Template ID of the directory role                  |
| TenantID               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure AD Tenant ID the role belongs to             |
| RolePermissionsAllowed | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Permissions allowed by the role                    |
| AZTier                 | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Azure tier classification assigned by Forestall    |