AzRoleAdvertizer

last sync: 2025-Sep-16 17:22:53 UTC

Storage Actions Blob Data Operator

Azure BuiltIn RBAC Role definition

NameStorage Actions Blob Data Operator
Id4bad4d9e-2a13-4888-94bb-c8432f6f3040
DescriptionUsed by the Storage Actions - Storage Task to list & perform operations on the Storage Account blobs
CategoryNone
CreatedOn2025-09-12 21:16:43 UTC
UpdatedOn2025-09-12 21:16:43 UTC
Permissions summary Effective control plane and data plane operations: 59 (unique operations)
•: 1
•Action: 10
•Delete: 3
•read: 40
•Write: 5

Actions: 6
Resolved control plane operations from Actions: 51
Effective control plane operations: 51
•: 1
•Action: 7
•Delete: 2
•read: 38
•Write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17102

DataActions: 8
Resolved data plane operations: 8
Effective data plane operations: 8
•action: 3
•delete: 1
•read: 2
•write: 2

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3740
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
Microsoft.Storage/storageAccounts/blobServices/containers/readReturns list of containers
Microsoft.Storage/storageAccounts/blobServices/containers/writeReturns the result of put blob container
NotActions n/a
DataActions
Operation Description
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/actionReturns the result of adding blob content
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/deleteReturns the result of deleting a blob
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/immutableStorage/runAsSuperUser/actionno description given
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/readReturns a blob or a list of blobs
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/runAsSuperUser/actionReturns the result of the blob command
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/readReturns the result of reading blob tags
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/writeReturns the result of writing blob tags
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/writeReturns the result of writing a blob
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-09-15 17:22:50 add: Role 4bad4d9e-2a13-4888-94bb-c8432f6f3040
JSON
api-version=2023-07-01-preview
Condition none