last sync: 2025-Apr-29 17:15:48 UTC

Container Registry Data Importer and Data Reader

Azure BuiltIn RBAC Role definition

NameContainer Registry Data Importer and Data Reader
Microsoft Learn
Id577a9874-89fd-4f24-9dbd-b5034d0ad23a
DescriptionProvides the ability to import images into a registry through the registry import operation. Provides the ability to list repositories, view images and tags, get manifests, and pull images. Does not provide permissions for importing images through configuring registry transfer pipelines such as import and export pipelines. Does not provide permissions for importing through configuring Artifact Cache or Sync rules.
CategoryContainers
Microsoft Learn
CreatedOn2024-09-19 02:48:17 UTC
UpdatedOn2025-04-25 08:31:50 UTC
Permissions summary Effective control plane and data plane operations: 6 (unique operations)
•action: 1
•read: 5

Actions: 3
Resolved control plane operations from Actions: 3
Effective control plane operations: 3
•action: 1
•read: 2

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16487

DataActions: 3
Resolved data plane operations: 3
Effective data plane operations: 3
•read: 3

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3368
Actions
Operation Description
Microsoft.ContainerRegistry/registries/importImage/actionImport Image to container registry with the specified parameters.
Microsoft.ContainerRegistry/registries/pull/readPull or Get images from a container registry.
Microsoft.ContainerRegistry/registries/readGets the properties of the specified container registry or lists all the container registries under the specified resource group or subscription.
NotActions n/a
DataActions
Operation Description
Microsoft.ContainerRegistry/registries/catalog/readList repositories in a container registry.
Microsoft.ContainerRegistry/registries/repositories/content/readPull or Get images from a container registry.
Microsoft.ContainerRegistry/registries/repositories/metadata/readGets the metadata of a specific repository for a container registry
NotDataActions n/a
Used in
BuiltIn Policy
none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-04-25 19:39:24 change: DataActions DataActions: 'add Microsoft.ContainerRegistry/registries/repositories/content/read; add Microsoft.ContainerRegistry/registries/repositories/metadata/read; add Microsoft.ContainerRegistry/registries/catalog/read'
2024-09-20 17:50:53 add: Role 577a9874-89fd-4f24-9dbd-b5034d0ad23a
JSON
api-version=2023-07-01-preview
Condition none