last sync: 2024-Jul-17 18:20:49 UTC

Managed HSM contributor

Azure BuiltIn RBAC Role definition

NameManaged HSM contributor
DescriptionLets you manage managed HSM pools, but not access to them.
CreatedOn2020-09-16 21:47:01 UTC
UpdatedOn2022-03-08 00:35:44 UTC
Date/Time (UTC ymd) (i) Change Change detail
2022-03-08 17:46:41 change: Actions Actions: 'add Microsoft.KeyVault/deletedManagedHsms/read; add Microsoft.KeyVault/locations/deletedManagedHsms/read; add Microsoft.KeyVault/locations/deletedManagedHsms/purge/action; add Microsoft.KeyVault/locations/managedHsmOperationResults/read'
2020-09-17 14:31:34 add: Role 18500a29-7fe2-46b2-a342-b16a415e101d
Permissions summary Effective control plane and data plane operations: 23 (unique operations)
•action: 3
•delete: 3
•read: 12
•write: 5

Actions: 5
Resolved control plane operations from Actions: 23
Effective control plane operations: 23
•action: 3
•delete: 3
•read: 12
•write: 5

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15671

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3217
Operation Description
Microsoft.KeyVault/deletedManagedHsms/readView the properties of a deleted managed hsm
Microsoft.KeyVault/locations/deletedManagedHsms/purge/actionPurge a soft deleted managed hsm
Microsoft.KeyVault/locations/deletedManagedHsms/readView the properties of a deleted managed hsm
Microsoft.KeyVault/locations/managedHsmOperationResults/readCheck the result of a long run operation
Microsoft.KeyVault/managedHSMs/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
Policy DisplayName Policy Id Category State
[Preview]: Configure Azure Key Vault Managed HSM to disable public network access 84d327c3-164a-4685-b453-900478614456 Key Vault Preview
[Preview]: Configure Azure Key Vault Managed HSM with private endpoints d1d6d8bb-cc7c-420f-8c7d-6f6f5279a844 Key Vault Preview
Condition none