Microsoft Entra roles documentation
Microsoft Entra role-based access control manages access to Microsoft Entra resources. Create custom roles, assign roles that use administrative units to restrict scope of control, assign application access to groups or users, manage eligibility with Privileged Identity Management (PIM), or delegate permissions to distribute identity management tasks.