last sync: 2024-Nov-25 18:54:42 UTC

Landing Zone Account Reader

Azure BuiltIn RBAC Role definition

NameLanding Zone Account Reader
Id2718b1f7-eb07-424e-8868-0137541392a1
DescriptionMicrosoft.Sovereign Landing Zone Account Reader allowing to read Landing Zone Account, Landing Zone Configurations and Landing Zone Registrations. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).
CreatedOn2024-10-14 15:14:51 UTC
UpdatedOn2024-10-14 15:14:51 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2024-10-14 17:53:50 add: Role 2718b1f7-eb07-424e-8868-0137541392a1
Permissions summary Effective control plane and data plane operations: 2 (unique operations)
•read: 2

Actions: 1
Resolved control plane operations from Actions: 2
Effective control plane operations: 2
•read: 2

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16170

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3303
Actions
Operation Description
Microsoft.Sovereign/landingZoneAccounts/*/readwildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
none
JSON
api-version=2023-07-01-preview
Condition none