last sync: 2025-Oct-15 17:22:44 UTC

Azure Device Registry Onboarding Role

Azure BuiltIn RBAC Role definition

NameAzure Device Registry Onboarding Role
Id547f7f0a-69c0-4807-bd9e-0321dfb66a84
DescriptionOnboard to Azure Device Registry.
CategoryNone
CreatedOn2025-10-13 15:11:14 UTC
UpdatedOn2025-10-13 15:11:14 UTC
Permissions summary Effective control plane and data plane operations: 93 (unique operations)
•action: 19
•delete: 16
•read: 39
•write: 19

Actions: 7
Resolved control plane operations from Actions: 87
Effective control plane operations: 87
•action: 19
•delete: 14
•read: 37
•write: 17

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17276

DataActions: 2
Resolved data plane operations: 6
Effective data plane operations: 6
•delete: 2
•read: 2
•write: 2

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4072
Actions
Operation Description
Microsoft.DeviceRegistry/namespaces/credentials/*wildcarded / no description
Microsoft.DeviceRegistry/namespaces/credentials/policies/*wildcarded / no description
Microsoft.DeviceRegistry/namespaces/deleteDelete a Namespace
Microsoft.DeviceRegistry/namespaces/readGet a Namespace
Microsoft.DeviceRegistry/namespaces/writeUpdate a Namespace
Microsoft.Devices/iothubs/*wildcarded / no description
Microsoft.Devices/provisioningServices/*wildcarded / no description
NotActions n/a
DataActions
Operation Description
Microsoft.Devices/provisioningServices/enrollmentGroups/*wildcarded / no description
Microsoft.Devices/provisioningServices/enrollments/*wildcarded / no description
NotDataActions n/a
Used in
BuiltIn Policy
none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-10-13 17:22:44 add: Role 547f7f0a-69c0-4807-bd9e-0321dfb66a84
JSON
api-version=2023-07-01-preview
Condition none