last sync: 2024-Sep-19 17:51:49 UTC

Landing Zone Management Reader

Azure BuiltIn RBAC Role definition

NameLanding Zone Management Reader
Id8fe6e843-6d9e-417b-9073-106b048f50bb
DescriptionMicrosoft.Sovereign Landing Zone Management Reader allowing to review Landing Zone Configurations and corresponding Registrations without the ability to modify. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).
CreatedOn2023-10-09 15:06:52 UTC
UpdatedOn2023-10-09 15:06:52 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2023-10-09 18:04:57 add: Role 8fe6e843-6d9e-417b-9073-106b048f50bb
Permissions summary Effective control plane and data plane operations: 2 (unique operations)
•read: 2

Actions: 2
Resolved control plane operations from Actions: 2
Effective control plane operations: 2
•read: 2

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15793

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3259
Actions
Operation Description
Microsoft.Sovereign/landingZoneConfigurations/readGet a LandingZoneConfiguration
Microsoft.Sovereign/landingZoneRegistrations/readGet a LandingZoneRegistration
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
none
JSON
api-version=2023-07-01-preview
Condition none