last sync: 2025-Apr-29 17:15:48 UTC

Azure Red Hat OpenShift File Storage Operator

Azure BuiltIn RBAC Role definition

NameAzure Red Hat OpenShift File Storage Operator
Microsoft Learn
Id0d7aedc0-15fd-4a67-a412-efad370c947e
DescriptionInstall Container Storage Interface (CSI) drivers that enable your cluster to use Azure Files. Set OpenShift cluster-wide storage defaults to ensure a default storageclass exists for clusters.
CategoryContainers
Microsoft Learn
CreatedOn2024-01-30 16:11:37 UTC
UpdatedOn2025-03-11 15:14:12 UTC
Permissions summary Effective control plane and data plane operations: 13 (unique operations)
•action: 4
•delete: 2
•read: 4
•write: 3

Actions: 13
Resolved control plane operations from Actions: 13
Effective control plane operations: 13
•action: 4
•delete: 2
•read: 4
•write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16477

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3371
Actions
Operation Description
Microsoft.Network/natGateways/join/actionJoins a NAT Gateway
Microsoft.Network/networkSecurityGroups/join/actionJoins a network security group. Not Alertable.
Microsoft.Network/routeTables/join/actionJoins a route table. Not Alertable.
Microsoft.Network/virtualNetworks/subnets/readGets a virtual network subnet definition
Microsoft.Network/virtualNetworks/subnets/writeCreates a virtual network subnet or updates an existing virtual network subnet
Microsoft.Storage/storageAccounts/deleteDeletes an existing storage account.
Microsoft.Storage/storageAccounts/fileServices/readGet file service properties
Microsoft.Storage/storageAccounts/fileServices/shares/deleteDelete file share
Microsoft.Storage/storageAccounts/fileServices/shares/readList file shares
Microsoft.Storage/storageAccounts/fileServices/shares/writeCreate or update file share
Microsoft.Storage/storageAccounts/listKeys/actionReturns the access keys for the specified storage account.
Microsoft.Storage/storageAccounts/readReturns the list of storage accounts or gets the properties for the specified storage account.
Microsoft.Storage/storageAccounts/writeCreates a storage account with the specified parameters or update the properties or tags or adds custom domain for the specified storage account.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-03-11 18:29:19 change: DisplayName, Actions New DisplayName: 'Azure Red Hat OpenShift File Storage Operator'
Old DisplayName: 'Azure RedHat OpenShift Azure Files Storage Operator Role',
Actions: 'add Microsoft.Network/routeTables/join/action; add Microsoft.Network/natGateways/join/action'
2024-04-15 17:47:24 change: Actions Actions: 'add Microsoft.Storage/storageAccounts/delete; add Microsoft.Storage/storageAccounts/fileServices/read; add Microsoft.Storage/storageAccounts/fileServices/shares/delete; add Microsoft.Storage/storageAccounts/fileServices/shares/read; add Microsoft.Storage/storageAccounts/fileServices/shares/write; add Microsoft.Storage/storageAccounts/listKeys/action; add Microsoft.Storage/storageAccounts/read; add Microsoft.Storage/storageAccounts/write; add Microsoft.Network/networkSecurityGroups/join/action; add Microsoft.Network/virtualNetworks/subnets/read; add Microsoft.Network/virtualNetworks/subnets/write'
2024-01-31 19:57:40 add: Role 0d7aedc0-15fd-4a67-a412-efad370c947e
JSON
api-version=2023-07-01-preview
Condition none