last sync: 2024-Jul-17 18:20:49 UTC

Device Update Administrator

Azure BuiltIn RBAC Role definition

NameDevice Update Administrator
DescriptionGives you full access to management and content operations
CreatedOn2020-08-21 23:56:22 UTC
UpdatedOn2021-11-11 20:14:40 UTC
Date/Time (UTC ymd) (i) Change Change detail
2020-08-23 16:02:03 add: Role 02ca0879-e8e4-47a5-a61e-5c618b76e64a
Permissions summary Effective control plane and data plane operations: 61 (unique operations)
•: 1
•Action: 10
•delete: 4
•read: 41
•write: 5

Actions: 5
Resolved control plane operations from Actions: 55
Effective control plane operations: 55
•: 1
•Action: 10
•Delete: 2
•read: 39
•Write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15639

DataActions: 6
Resolved data plane operations: 6
Effective data plane operations: 6
•delete: 2
•read: 2
•write: 2

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3211
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
Microsoft.Support/*wildcarded / no description
NotActions n/a
Operation Description
Microsoft.DeviceUpdate/accounts/instances/management/deletePerforms a delete operation related to management
Microsoft.DeviceUpdate/accounts/instances/management/readPerforms a read operation related to management
Microsoft.DeviceUpdate/accounts/instances/management/writePerforms a write operation related to management
Microsoft.DeviceUpdate/accounts/instances/updates/deletePerforms a delete operation related to updates
Microsoft.DeviceUpdate/accounts/instances/updates/readPerforms a read operation related to updates
Microsoft.DeviceUpdate/accounts/instances/updates/writePerforms a write operation related to updates
NotDataActions n/a
Used in
BuiltIn Policy
Condition none