Directory role

Last updated Oct 17, 2026 Inventory

AI summary

Rencore Governance tracks directory roles from Entra ID as part of your Entra ID inventory, scanning properties like descriptions, display names, and risk scores at intervals you configure. You can see which users, groups, and SharePoint special groups have been assigned each role.

All directory roles registered in Entra ID

Part of the Entra ID inventory.

In Rencore Governance

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Monthly	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	No

Properties

Property	Type	Description	Automation placeholder
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	`{{DirectoryRole.CreatedTime}}`
Description	String	The description for the directory role.	`{{DirectoryRole.Description}}`
Id	String	The unique identifier for the directory role.	`{{DirectoryRole.DirectoryRoleId}}`
Display Name	String		`{{DirectoryRole.DisplayName}}`
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	`{{DirectoryRole.LastModifiedTime}}`
Risk Score	Int32	Stores risk score	`{{DirectoryRole.RiskScore}}`
Risk Score Update	DateTime	Stores risk score update	`{{DirectoryRole.RiskScoreLastUpdate}}`
Risk Score Value	String	Stores risk score value like Low_Low	`{{DirectoryRole.RiskScoreValue}}`
Role Template Id	String	The id of the directoryRoleTemplate that this role is based on.	`{{DirectoryRole.RoleTemplateId}}`

Relations

Relation	Connector	Description
Group	Microsoft 365	Groups which have been assigned this role (direct or via security group)
User	Microsoft 365	Users which have been assigned this role (direct or via security group)
SharePoint special group	SharePoint	This is a special group for SharePoint which is used to give access to content in SharePoint to special group of users

Segments

This object does currently not have any segments.

Actions

This object does currently not have any actions.

Frequently asked questions

What is the directory role object in Rencore Governance?

All directory roles registered in Entra ID. Directory role is an object type in the Entra ID inventory of Rencore Governance.

Which properties does Rencore Governance collect for directory role?

Rencore Governance collects 9 properties for Directory role, such as Initially Scanned, Description, Id and 6 more.

How often is directory role scanned?

By default monthly. You can change the scan interval of Directory role objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the Entra ID connector?

The Entra ID connector is part of the Digital Workplace module of Rencore Governance, which every Plan includes. The connector is generally available.

Was this page helpful?