last sync: 2024-May-07 17:44:27 UTC

Landing Zone Management Owner

Azure BuiltIn RBAC Role definition

NameLanding Zone Management Owner
Id38863829-c2a4-4f8d-b1d2-2e325973ebc7
DescriptionMicrosoft.Sovereign Landing Zone Management Owner allowing to review and modify Landing Zone Configurations as well as reading and adding Landing Zone Registrations. Also enables read-access to policies and management groups for enabling the full user experience of the Sovereign Services RP in the Azure Portal (as otherwise some elements might not be accessible to end users).
CreatedOn2023-10-06 08:51:38 UTC
UpdatedOn2023-10-06 08:51:38 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2023-10-09 18:04:57 add: Role 38863829-c2a4-4f8d-b1d2-2e325973ebc7
Permissions summary Effective control plane and data plane operations: 45 (unique operations)
•action: 7
•delete: 3
•read: 32
•write: 3

Actions: 4
Resolved control plane operations from Actions: 45
Effective control plane operations: 45
•action: 7
•delete: 3
•read: 32
•write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15576

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3080
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Sovereign/landingZoneConfigurations/*wildcarded / no description
Microsoft.Sovereign/landingZoneRegistrations/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
none
JSON
api-version=2023-07-01-preview
Condition none