AzRoleAdvertizer

last sync: 2024-Apr-26 17:47:18 UTC

Kubernetes Cluster - Azure Arc Onboarding

Azure BuiltIn RBAC Role definition

NameKubernetes Cluster - Azure Arc Onboarding
Id34e09817-6cbe-4d01-b1a2-e0eac5743d41
DescriptionRole definition to authorize any user/service to create connectedClusters resource
CreatedOn2019-11-18 17:00:02 UTC
UpdatedOn2021-11-11 20:14:12 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2020-02-11 08:11:18 change: DisplayName Old DisplayName: Kubernetes Cluster - Azure Arc Onborading
2019-12-13 11:23:49 change: DisplayName Old DisplayName: Kubernetes Cluster - Azure Arc Onborading Role
Permissions summary Effective control plane and data plane operations: 51 (unique operations)
•: 1
•Action: 6
•Delete: 1
•read: 39
•Write: 4

Actions: 9
Resolved control plane operations from Actions: 51
Effective control plane operations: 51
•: 1
•Action: 6
•Delete: 1
•read: 39
•Write: 4

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15335

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3121
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
Microsoft.Kubernetes/connectedClusters/readRead connectedClusters
Microsoft.Kubernetes/connectedClusters/WriteWrites connectedClusters
Microsoft.Resources/deployments/writeCreates or updates an deployment.
Microsoft.Resources/subscriptions/operationresults/readGet the subscription operation results.
Microsoft.Resources/subscriptions/readGets the list of subscriptions.
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
Microsoft.Support/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
Policy DisplayName Policy Id Category State
Configure Azure Arc Private Link Scopes with private endpoints d6eeba80-df61-4de5-8772-bc1b7852ba6b Azure Arc GA
Configure Azure Arc-enabled Kubernetes clusters to use an Azure Arc Private Link Scope 4002015b-1272-4dfb-8943-fed4aeec39b6 Azure Arc GA
JSON
api-version=2022-05-01-preview
Condition none