Az
Role
Advertizer
Show Menu
Hide Menu
Home
Policy
Changes
All
Initiative
Changes
All
Alias
Changes
All
Compliance
aggregated
byPolicy
Azure Access control
Azure RBAC Role - changes
Azure RBAC Role - all
Azure RBAC Resource Provider Operations
Entra-Id Access control
Microsoft Entra ID Roles
Microsoft Entra ID Role Actions
Microsoft Entra ID API permissions
CatchUp
Azure Notes
SavillTech
Links
Info
Feedback
last sync: 2024-Apr-19 17:44:22 UTC
Site Recovery Operator
Azure BuiltIn RBAC Role definition
All Azure RBAC Role definitions
Changes on Azure RBAC Role definitions
Track RBAC changes in your tenant:
Azure Governance Visualizer (aka AzGovViz)
Name
Site Recovery Operator
Id
494ae006-db33-4328-bf46-533a6560a3ca
Description
Lets you failover and failback but not perform other Site Recovery management operations
CreatedOn
2017-05-19 13:47:50 UTC
UpdatedOn
2021-11-11 20:13:52 UTC
History
Date/Time (UTC ymd)
(i)
Change
Change detail
2021-09-10 15:51:14
change: Actions
Actions:
'add Microsoft.RecoveryServices/vaults/replicationVaultSettings/read'
Permissions summary
Effective
control plane
and
data plane
operations:
114
(unique operations)
•: 1
•Action: 34
•Delete: 2
•read: 73
•Write: 4
Actions: 59
Resolved
control plane
operations from Actions: 114
Effective
control plane
operations: 114
•: 1
•Action: 34
•Delete: 2
•read: 73
•Write: 4
NotActions: 0
Resolved
control plane
operations from NotActions: 0
Effective denied
control plane
operations: 15247
DataActions: 0
Resolved
data plane
operations: 0
Effective
data plane
operations: 0
NotDataActions: 0
Resolved
data plane
operations from NotDataActions: 0
Effective denied
data plane
operations: 3120
Actions
Operation
Description
Microsoft.Authorization/*/read
wildcarded / no description
Microsoft.Insights/alertRules/*
wildcarded / no description
Microsoft.Network/virtualNetworks/read
Get the virtual network definition
Microsoft.RecoveryServices/locations/allocatedStamp/read
GetAllocatedStamp is internal operation used by service
Microsoft.RecoveryServices/locations/allocateStamp/action
AllocateStamp is internal operation used by service
Microsoft.RecoveryServices/Vaults/extendedInformation/read
The Get Extended Info operation gets an object's Extended Info representing the Azure resource of type ?vault?
Microsoft.RecoveryServices/Vaults/monitoringAlerts/*
wildcarded / no description
Microsoft.RecoveryServices/Vaults/monitoringConfigurations/notificationConfiguration/read
no description given
Microsoft.RecoveryServices/Vaults/read
The Get Vault operation gets an object representing the Azure resource of type 'vault'
Microsoft.RecoveryServices/Vaults/refreshContainers/read
no description given
Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read
The Get Operation Results operation can be used get the operation status and result for the asynchronously submitted operation
Microsoft.RecoveryServices/Vaults/registeredIdentities/read
The Get Containers operation can be used get the containers registered for a resource.
Microsoft.RecoveryServices/vaults/replicationAlertSettings/read
Read any Alerts Settings
Microsoft.RecoveryServices/vaults/replicationEvents/read
Read any Events
Microsoft.RecoveryServices/vaults/replicationFabrics/checkConsistency/action
Checks Consistency of the Fabric
Microsoft.RecoveryServices/vaults/replicationFabrics/read
Read any Fabrics
Microsoft.RecoveryServices/vaults/replicationFabrics/reassociateGateway/action
Reassociate Gateway
Microsoft.RecoveryServices/vaults/replicationFabrics/renewcertificate/action
Renew Certificate for Fabric
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/read
Read any Networks
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationNetworks/replicationNetworkMappings/read
Read any Network Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/read
Read any Protection Containers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectableItems/read
Read any Protectable Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/applyRecoveryPoint/action
Apply Recovery Point
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/failoverCommit/action
Failover Commit
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/plannedFailover/action
Planned Failover
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/read
Read any Protected Items
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/recoveryPoints/read
Read any Replication Recovery Points
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/repairReplication/action
Repair replication
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/reProtect/action
ReProtect Protected Item
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailover/action
Test Failover
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/testFailoverCleanup/action
Test Failover Cleanup
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/unplannedFailover/action
Failover
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems/updateMobilityService/action
Update Mobility Service
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings/read
Read any Protection Container Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/switchprotection/action
Switch Protection Container
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/read
Read any Recovery Services Providers
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders/refreshProvider/action
Refresh Provider
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/read
Read any Storage Classifications
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationStorageClassifications/replicationStorageClassificationMappings/read
Read any Storage Classification Mappings
Microsoft.RecoveryServices/vaults/replicationFabrics/replicationvCenters/read
Read any vCenters
Microsoft.RecoveryServices/vaults/replicationJobs/*
wildcarded / no description
Microsoft.RecoveryServices/vaults/replicationPolicies/read
Read any Policies
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/failoverCommit/action
Failover Commit Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/plannedFailover/action
Planned Failover Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/read
Read any Recovery Plans
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/reProtect/action
ReProtect Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailover/action
Test Failover Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/testFailoverCleanup/action
Test Failover Cleanup Recovery Plan
Microsoft.RecoveryServices/vaults/replicationRecoveryPlans/unplannedFailover/action
Failover Recovery Plan
Microsoft.RecoveryServices/vaults/replicationVaultSettings/read
Read any
Microsoft.RecoveryServices/Vaults/storageConfig/read
no description given
Microsoft.RecoveryServices/Vaults/tokenInfo/read
no description given
Microsoft.RecoveryServices/Vaults/usages/read
Read any Vault Usages
Microsoft.RecoveryServices/Vaults/vaultTokens/read
The Vault Token operation can be used to get Vault Token for vault level backend operations.
Microsoft.ResourceHealth/availabilityStatuses/read
Gets the availability statuses for all resources in the specified scope
Microsoft.Resources/deployments/*
wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/read
Gets or lists resource groups.
Microsoft.Storage/storageAccounts/read
Returns the list of storage accounts or gets the properties for the specified storage account.
Microsoft.Support/*
wildcarded / no description
NotActions
n/a
DataActions
n/a
NotDataActions
n/a
Used in
BuiltIn Policy
none
JSON
api-version=2022-05-01-preview
Copy definition
Condition
none