{
  "checkedAtUtc": "2026-09-13T15:40:21.5729764Z",
  "method": "GET /v1.0/roleManagement/directory/roleDefinitions/{roleDefinitionId}",
  "scope": "One lab tenant; existing delegated reader context. No assignments or permissions changed.",
  "roleDefinitions": [
    {
      "role": "SecurityAdministrator",
      "readable": true,
      "responseActions": [
        {
          "action": "microsoft.directory/users/disable",
          "present": true
        },
        {
          "action": "microsoft.directory/users/enable",
          "present": true
        },
        {
          "action": "microsoft.directory/users/invalidateAllRefreshTokens",
          "present": true
        },
        {
          "action": "microsoft.directory/users/password/update",
          "present": true
        }
      ]
    },
    {
      "role": "SecurityOperator",
      "readable": true,
      "responseActions": [
        {
          "action": "microsoft.directory/users/disable",
          "present": true
        },
        {
          "action": "microsoft.directory/users/enable",
          "present": true
        },
        {
          "action": "microsoft.directory/users/invalidateAllRefreshTokens",
          "present": true
        },
        {
          "action": "microsoft.directory/users/password/update",
          "present": true
        }
      ]
    },
    {
      "role": "SOCIdentityResponder",
      "readable": true,
      "responseActions": [
        {
          "action": "microsoft.directory/users/disable",
          "present": true
        },
        {
          "action": "microsoft.directory/users/enable",
          "present": true
        },
        {
          "action": "microsoft.directory/users/invalidateAllRefreshTokens",
          "present": true
        },
        {
          "action": "microsoft.directory/users/password/update",
          "present": true
        }
      ]
    }
  ],
  "interpretation": "These are action names in the current definitions, not new execution tests or authority over administrative accounts."
}