Authorization
Authorization is the process of determining what an authenticated identity is allowed to do, typically enforced through roles, permissions, and group memberships.
Authorization determines what an already-verified identity is permitted to do within Microsoft 365 and its Copilot features. In Microsoft Entra ID (formerly Azure AD), authorization is enforced primarily through role-based access control (RBAC): admin roles such as Global Administrator, Teams Administrator, or AI Administrator each carry a bounded set of permissions rather than blanket access. Conditional Access policies add another layer, restricting actions based on device compliance, location, or risk. Authorization is always a separate step that follows authentication. In Copilot and agent scenarios, least privilege means granting only the minimum Microsoft Graph permissions a task requires.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →