Role ID Purpose Description
CustomSecAttributeAssignment.Read.All 3b37c5a4-1226-493d-bec3-5d6c6b866f3f Read custom security attribute assignments Allows the app to read custom security attribute assignments for all principals in the tenant without a signed in user.
CustomSecAttributeAssignment.ReadWrite.All de89b5e4-5b8f-48eb-8925-29c2b33bd8bd Read and write custom security attribute assignments Allows the app to read and write custom security attribute assignments for all principals in the tenant without a signed in user.

Updated: