ReferenceRoles and permissions

Deep Research

Research-job creation, progress, interaction and reports.

Agentic Friendly

Research permissions are baseline tenant-member capabilities. Each job remains scoped to its tenant and owner. Access to research controls does not grant access to another user's reports or running jobs.

Permissions

This family contains 6 permissions. “Baseline member” means every current tenant member already has the operation permission, including members with any system role. It does not bypass the resource checks described above. “Custom role” means the identifier can be selected when defining a custom role.

research.job.cancel

Cancel the caller's active research job.

Cancel the caller's active research job.

PropertyValue
ScopeSelected tenant
Granted byBaseline member
Custom roleYes
Also impliesresearch.job.list, research.job.read

research.job.control

Answer clarification questions or approve a research plan for the caller's job.

Answer clarification questions or approve a research plan for the caller's job.

PropertyValue
ScopeSelected tenant
Granted byBaseline member
Custom roleYes
Also impliesresearch.job.list, research.job.read

research.job.create

Start a Deep Research job in the active tenant.

Start a Deep Research job in the active tenant.

PropertyValue
ScopeSelected tenant
Granted byBaseline member
Custom roleYes
Also impliesresearch.job.list, research.job.read

research.job.delete

Soft-delete the caller's research job.

Soft-delete the caller's research job.

PropertyValue
ScopeSelected tenant
Granted byBaseline member
Custom roleYes
Also impliesresearch.job.list, research.job.read

research.job.list

List the caller's research jobs.

List the caller's research jobs.

PropertyValue
ScopeSelected tenant
Granted byBaseline member
Custom roleYes
Also impliesresearch.job.read

research.job.read

Read a research job's status, event stream, coverage or report, subject to job ownership.

Read a research job's status, event stream, coverage or report, subject to job ownership.

PropertyValue
ScopeSelected tenant
Granted byBaseline member
Custom roleYes

On this page