last sync: 2024-Nov-25 18:54:42 UTC

Landing Zone Account Owner

Azure BuiltIn RBAC Role definition

NameLanding Zone Account Owner
Idbf2b6809-e9a5-4aea-a6e1-40a9dc8c43a7
DescriptionMicrosoft.Sovereign Landing Zone Account Owner allowing to review and modify Landing Zone Account, Landing Zone Configurations, as well as reading and adding Landing Zone Registrations. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).
CreatedOn2024-10-14 15:14:51 UTC
UpdatedOn2024-10-14 15:14:51 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2024-10-14 17:53:50 add: Role bf2b6809-e9a5-4aea-a6e1-40a9dc8c43a7
Permissions summary Effective control plane and data plane operations: 48 (unique operations)
•action: 7
•delete: 4
•read: 33
•write: 4

Actions: 3
Resolved control plane operations from Actions: 48
Effective control plane operations: 48
•action: 7
•delete: 4
•read: 33
•write: 4

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16124

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3303
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Sovereign/landingZoneAccounts/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
none
JSON
api-version=2023-07-01-preview
Condition none