AzRoleAdvertizer

last sync: 2025-Sep-16 17:22:53 UTC

SRE Agent Standard User

Azure BuiltIn RBAC Role definition

NameSRE Agent Standard User
Id2d84a65a-63b2-4343-bbb6-31105d857bc1
DescriptionGrants access to interact with the SRE Agent to triage incidents and run diagnostics.
CategoryNone
CreatedOn2025-09-10 20:06:45 UTC
UpdatedOn2025-09-16 15:14:52 UTC
Permissions summary Effective control plane and data plane operations: 47 (unique operations)
•: 1
•Action: 3
•Delete: 1
•read: 38
•write: 4

Actions: 3
Resolved control plane operations from Actions: 40
Effective control plane operations: 40
•: 1
•Action: 3
•Delete: 1
•read: 34
•Write: 1

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17113

DataActions: 7
Resolved data plane operations: 7
Effective data plane operations: 7
•read: 4
•write: 3

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3741
Actions
Operation Description
Microsoft.App/agents/readRead SRE Agent properties
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
NotActions n/a
DataActions
Operation Description
Microsoft.App/agents/graph/readRead resource graph in an SRE agent
Microsoft.App/agents/graph/writeUpdate nodes in resource graph in an SRE agent
Microsoft.App/agents/incidentManagement/readRead incident management configurations in an SRE agent
Microsoft.App/agents/memory/readRead agent memory in an SRE agent
Microsoft.App/agents/memory/writeUpdate agent memory in an SRE agent
Microsoft.App/agents/threads/readRead all the conversation threads with an SRE Agent
Microsoft.App/agents/threads/writeCreate new conversation threads with an SRE Agent and reply to existing threads
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-09-16 17:22:53 change: DisplayName, DataActions New DisplayName: 'SRE Agent Standard User'
Old DisplayName: 'SRE Agent User',
DataActions: 'remove Microsoft.App/agents/*/read; remove Microsoft.App/agents/*/write; add Microsoft.App/agents/threads/read; add Microsoft.App/agents/graph/read; add Microsoft.App/agents/memory/read; add Microsoft.App/agents/incidentManagement/read; add Microsoft.App/agents/threads/write; add Microsoft.App/agents/graph/write; add Microsoft.App/agents/memory/write'
2025-09-11 17:22:51 add: Role 2d84a65a-63b2-4343-bbb6-31105d857bc1
JSON
api-version=2023-07-01-preview
Condition none