AzRoleAdvertizer

last sync: 2024-Apr-18 17:44:25 UTC

Azure Arc VMware Private Clouds Onboarding

Azure BuiltIn RBAC Role definition

NameAzure Arc VMware Private Clouds Onboarding
Id67d33e57-3129-45e6-bb0b-7cc522f762fa
DescriptionAzure Arc VMware Private Clouds Onboarding role has permissions to provision all the required resources for onboard and deboard vCenter instances to Azure.
CreatedOn2021-11-01 22:18:08 UTC
UpdatedOn2023-08-21 15:00:43 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2023-08-21 17:58:08 change: Actions Actions: 'add Microsoft.KubernetesConfiguration/extensions/operations/read; add Microsoft.ResourceConnector/appliances/listClusterUserCredential/action'
2022-09-27 16:35:31 change: Actions Actions: 'add Microsoft.BackupSolutions/vmwareapplications/write; add Microsoft.BackupSolutions/vmwareapplications/delete; add Microsoft.BackupSolutions/vmwareapplications/read'
2022-01-14 17:44:10 add: Role 67d33e57-3129-45e6-bb0b-7cc522f762fa
Permissions summary Effective control plane and data plane operations: 70 (unique operations)
•action: 9
•delete: 7
•read: 46
•write: 8

Actions: 44
Resolved control plane operations from Actions: 70
Effective control plane operations: 70
•action: 9
•delete: 7
•read: 46
•write: 8

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15286

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3118
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.BackupSolutions/vmwareapplications/deleteRemoves an application.
Microsoft.BackupSolutions/vmwareapplications/readRetrieves a list of applications.
Microsoft.BackupSolutions/vmwareapplications/writeCreates an application.
Microsoft.ConnectedVMwarevSphere/vcenters/DeleteDeletes vcenters
Microsoft.ConnectedVMwarevSphere/vcenters/ReadRead vcenters
Microsoft.ConnectedVMwarevSphere/vcenters/WriteWrites vcenters
Microsoft.ExtendedLocation/customLocations/DeleteDeletes Custom Location resource
Microsoft.ExtendedLocation/customLocations/deploy/actionDeploy permissions to a Custom Location resource
Microsoft.ExtendedLocation/customLocations/ReadGets an Custom Location resource
Microsoft.ExtendedLocation/customLocations/WriteCreates or Updates Custom Location resource
Microsoft.Insights/AlertRules/Activated/ActionClassic metric alert activated
Microsoft.Insights/AlertRules/DeleteDelete a classic metric alert
Microsoft.Insights/AlertRules/Incidents/ReadRead a classic metric alert incident
Microsoft.Insights/AlertRules/ReadRead a classic metric alert
Microsoft.Insights/AlertRules/Resolved/ActionClassic metric alert resolved
Microsoft.Insights/AlertRules/Throttled/ActionClassic metric alert rule throttled
Microsoft.Insights/AlertRules/WriteCreate or update a classic metric alert
Microsoft.KubernetesConfiguration/extensions/DeleteDeletes extension instance resource.
Microsoft.KubernetesConfiguration/extensions/operations/readGets Async Operation status.
Microsoft.KubernetesConfiguration/extensions/ReadGets extension instance resource.
Microsoft.KubernetesConfiguration/extensions/WriteCreates or updates extension resource.
Microsoft.KubernetesConfiguration/operations/readGets available operations of the Microsoft.KubernetesConfiguration resource provider.
Microsoft.ResourceConnector/appliances/DeleteDeletes Appliance resource
Microsoft.ResourceConnector/appliances/listClusterUserCredential/actionGet an appliance cluster user credential
Microsoft.ResourceConnector/appliances/ReadGets an Appliance resource
Microsoft.ResourceConnector/appliances/WriteCreates or Updates Appliance resource
Microsoft.ResourceHealth/availabilityStatuses/readGets the availability statuses for all resources in the specified scope
Microsoft.Resources/deployments/cancel/actionCancels a deployment.
Microsoft.Resources/deployments/deleteDeletes a deployment.
Microsoft.Resources/deployments/exportTemplate/actionExport template for a deployment
Microsoft.Resources/deployments/operations/readGets or lists deployment operations.
Microsoft.Resources/deployments/operationstatuses/readGets or lists deployment operation statuses.
Microsoft.Resources/deployments/readGets or lists deployments.
Microsoft.Resources/deployments/validate/actionValidates an deployment.
Microsoft.Resources/deployments/whatIf/actionPredicts template deployment changes.
Microsoft.Resources/deployments/writeCreates or updates an deployment.
Microsoft.Resources/subscriptions/operationresults/readGet the subscription operation results.
Microsoft.Resources/subscriptions/readGets the list of subscriptions.
Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/readGets or lists deployment operations.
Microsoft.Resources/subscriptions/resourcegroups/deployments/operationstatuses/readGets or lists deployment operation statuses.
Microsoft.Resources/subscriptions/resourcegroups/deployments/readGets or lists deployments.
Microsoft.Resources/subscriptions/resourcegroups/deployments/writeCreates or updates an deployment.
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
JSON
api-version=2022-05-01-preview
Condition none