AzRoleAdvertizer

last sync: 2024-Sep-19 17:51:49 UTC

Azure Stack HCI VM Contributor

Azure BuiltIn RBAC Role definition

NameAzure Stack HCI VM Contributor
Id874d1c73-6003-4e60-a13a-cb31ea190a85
DescriptionGrants permissions to perform all VM actions
CreatedOn2023-10-23 15:12:07 UTC
UpdatedOn2024-06-24 15:12:45 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2024-06-21 18:14:52 change: Actions Actions: 'add Microsoft.AzureStackHCI/NetworkSecurityGroups/Read; add Microsoft.AzureStackHCI/NetworkSecurityGroups/SecurityRules/Read'
2023-10-23 17:41:36 add: Role 874d1c73-6003-4e60-a13a-cb31ea190a85
Permissions summary Effective control plane and data plane operations: 123 (unique operations)
•action: 24
•Delete: 12
•read: 74
•Write: 13

Actions: 75
Resolved control plane operations from Actions: 123
Effective control plane operations: 123
•action: 24
•Delete: 12
•read: 74
•Write: 13

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15672

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3259
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.AzureStackHCI/Clusters/ArcSettings/ReadGets arc resource of HCI cluster
Microsoft.AzureStackHCI/Clusters/Readno description given
Microsoft.AzureStackHCI/GalleryImages/deploy/actionDeploys gallery images resource
Microsoft.AzureStackHCI/GalleryImages/ReadGets/Lists gallery images resource
Microsoft.AzureStackHCI/LogicalNetworks/join/actionJoins logical networks resource
Microsoft.AzureStackHCI/LogicalNetworks/ReadGets/Lists logical networks resource
Microsoft.AzureStackHCI/MarketPlaceGalleryImages/deploy/actionDeploys market place gallery images resource
Microsoft.AzureStackHCI/MarketplaceGalleryImages/ReadGets/Lists market place gallery images resource
Microsoft.AzureStackHCI/NetworkInterfaces/*wildcarded / no description
Microsoft.AzureStackHCI/NetworkSecurityGroups/ReadGets/Lists a network security group resource
Microsoft.AzureStackHCI/NetworkSecurityGroups/SecurityRules/ReadGets/Lists security rule resource
Microsoft.AzureStackHCI/StorageContainers/deploy/actionDeploys storage containers resource
Microsoft.AzureStackHCI/StorageContainers/ReadGets/Lists storage containers resource
Microsoft.AzureStackHCI/VirtualHardDisks/*wildcarded / no description
Microsoft.AzureStackHCI/virtualMachineInstances/*wildcarded / no description
Microsoft.AzureStackHCI/VirtualMachines/*wildcarded / no description
Microsoft.AzureStackHCI/VirtualNetworks/join/actionJoins virtual networks resource
Microsoft.AzureStackHCI/VirtualNetworks/ReadGets/Lists virtual networks resource
Microsoft.ExtendedLocation/customLocations/deploy/actionDeploy permissions to a Custom Location resource
Microsoft.ExtendedLocation/customLocations/ReadGets an Custom Location resource
Microsoft.HybridCompute/licenses/deleteDeletes an Azure Arc licenses
Microsoft.HybridCompute/licenses/readReads any Azure Arc licenses
Microsoft.HybridCompute/licenses/writeInstalls or Updates an Azure Arc licenses
Microsoft.HybridCompute/locations/operationresults/readReads the status of an operation on Microsoft.HybridCompute Resource Provider
Microsoft.HybridCompute/locations/operationstatus/readReads the status of an operation on Microsoft.HybridCompute Resource Provider
Microsoft.HybridCompute/locations/updateCenterOperationResults/readReads the status of an update center operation on machines
Microsoft.HybridCompute/machines/assessPatches/actionAssesses any Azure Arc machines to get missing software patches
Microsoft.HybridCompute/machines/deleteDeletes an Azure Arc machines
Microsoft.HybridCompute/machines/extensions/deleteDeletes an Azure Arc extensions
Microsoft.HybridCompute/machines/extensions/readReads any Azure Arc extensions
Microsoft.HybridCompute/machines/extensions/writeInstalls or Updates an Azure Arc extensions
Microsoft.HybridCompute/machines/hybridIdentityMetadata/readRead any Azure Arc machines's Hybrid Identity Metadata
Microsoft.HybridCompute/machines/installPatches/actionInstalls patches on any Azure Arc machines
Microsoft.HybridCompute/machines/licenseProfiles/deleteDeletes an Azure Arc licenseProfiles
Microsoft.HybridCompute/machines/licenseProfiles/readReads any Azure Arc licenseProfiles
Microsoft.HybridCompute/machines/licenseProfiles/writeInstalls or Updates an Azure Arc licenseProfiles
Microsoft.HybridCompute/machines/patchAssessmentResults/readReads any Azure Arc patchAssessmentResults
Microsoft.HybridCompute/machines/patchAssessmentResults/softwarePatches/readReads any Azure Arc patchAssessmentResults/softwarePatches
Microsoft.HybridCompute/machines/patchInstallationResults/readReads any Azure Arc patchInstallationResults
Microsoft.HybridCompute/machines/patchInstallationResults/softwarePatches/readReads any Azure Arc patchInstallationResults/softwarePatches
Microsoft.HybridCompute/machines/readRead any Azure Arc machines
Microsoft.HybridCompute/machines/runcommands/deleteDeletes an Azure Arc runcommands
Microsoft.HybridCompute/machines/runcommands/readReads any Azure Arc runcommands
Microsoft.HybridCompute/machines/runcommands/writeInstalls or Updates an Azure Arc runcommands
Microsoft.HybridCompute/machines/UpgradeExtensions/actionUpgrades Extensions on Azure Arc machines
Microsoft.HybridCompute/machines/writeWrites an Azure Arc machines
Microsoft.HybridCompute/operations/readRead all Operations for Azure Arc for Servers
Microsoft.HybridCompute/osType/agentVersions/latest/readno description given
Microsoft.HybridCompute/osType/agentVersions/readno description given
Microsoft.Insights/AlertRules/Activated/ActionClassic metric alert activated
Microsoft.Insights/AlertRules/DeleteDelete a classic metric alert
Microsoft.Insights/AlertRules/Incidents/ReadRead a classic metric alert incident
Microsoft.Insights/AlertRules/ReadRead a classic metric alert
Microsoft.Insights/AlertRules/Resolved/ActionClassic metric alert resolved
Microsoft.Insights/AlertRules/Throttled/ActionClassic metric alert rule throttled
Microsoft.Insights/AlertRules/WriteCreate or update a classic metric alert
Microsoft.KubernetesConfiguration/extensions/readGets extension instance resource.
Microsoft.ResourceHealth/availabilityStatuses/readGets the availability statuses for all resources in the specified scope
Microsoft.Resources/deployments/cancel/actionCancels a deployment.
Microsoft.Resources/deployments/deleteDeletes a deployment.
Microsoft.Resources/deployments/exportTemplate/actionExport template for a deployment
Microsoft.Resources/deployments/operations/readGets or lists deployment operations.
Microsoft.Resources/deployments/operationstatuses/readGets or lists deployment operation statuses.
Microsoft.Resources/deployments/readGets or lists deployments.
Microsoft.Resources/deployments/validate/actionValidates an deployment.
Microsoft.Resources/deployments/whatIf/actionPredicts template deployment changes.
Microsoft.Resources/deployments/writeCreates or updates an deployment.
Microsoft.Resources/subscriptions/operationresults/readGet the subscription operation results.
Microsoft.Resources/subscriptions/readGets the list of subscriptions.
Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/readGets or lists deployment operations.
Microsoft.Resources/subscriptions/resourcegroups/deployments/operationstatuses/readGets or lists deployment operation statuses.
Microsoft.Resources/subscriptions/resourcegroups/deployments/readGets or lists deployments.
Microsoft.Resources/subscriptions/resourcegroups/deployments/writeCreates or updates an deployment.
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
JSON
api-version=2023-07-01-preview
Condition none