AzRoleAdvertizer

last sync: 2024-Nov-25 18:54:42 UTC

Security Detonation Chamber Submitter

Azure BuiltIn RBAC Role definition

NameSecurity Detonation Chamber Submitter
Id0b555d9b-b4a7-4f43-b330-627f0e5be8f0
DescriptionAllowed to create submissions to Security Detonation Chamber
CreatedOn2020-10-01 08:55:21 UTC
UpdatedOn2021-11-11 20:14:47 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2021-05-24 17:13:01 change: DataActions DataActions: 'add Microsoft.SecurityDetonation/chambers/platforms/metadata/read; add Microsoft.SecurityDetonation/chambers/workflows/metadata/read; add Microsoft.SecurityDetonation/chambers/toolsets/metadata/read'
2021-01-25 16:07:06 change: DataActions DataActions: 'add Microsoft.SecurityDetonation/chambers/submissions/files/read; add Microsoft.SecurityDetonation/chambers/submissions/accesskeyview/read'
2020-10-19 15:27:07 add: Role 0b555d9b-b4a7-4f43-b330-627f0e5be8f0
Permissions summary Effective control plane and data plane operations: 8 (unique operations)
•delete: 1
•read: 6
•write: 1

Actions: 0
Resolved control plane operations from Actions: 0
Effective control plane operations: 0

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16172

DataActions: 8
Resolved data plane operations: 8
Effective data plane operations: 8
•delete: 1
•read: 6
•write: 1

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3295
Actions n/a
NotActions n/a
DataActions
Operation Description
Microsoft.SecurityDetonation/chambers/platforms/metadata/readAllows reading platforms metadata
Microsoft.SecurityDetonation/chambers/submissions/accesskeyview/readAllows retrieving (including in bulk) and deleting submissions using a submission ID + access key
Microsoft.SecurityDetonation/chambers/submissions/deleteAllows deletion of submissions
Microsoft.SecurityDetonation/chambers/submissions/files/readAllows reading of submission files
Microsoft.SecurityDetonation/chambers/submissions/readAllows retrieving submissions using submission IDs for submissions marked as 'shared with Submitter'
Microsoft.SecurityDetonation/chambers/submissions/writeAllows creating submissions of files/urls for detonation
Microsoft.SecurityDetonation/chambers/toolsets/metadata/readAllows reading toolsets metadata
Microsoft.SecurityDetonation/chambers/workflows/metadata/readAllows reading workflows metadata
NotDataActions n/a
Used in
BuiltIn Policy		 none
JSON
api-version=2023-07-01-preview
Condition none