AzRoleAdvertizer

last sync: 2024-Jul-26 18:17:46 UTC

Storage File Data Privileged Contributor

Azure BuiltIn RBAC Role definition

NameStorage File Data Privileged Contributor
Id69566ab7-960f-475b-8e7c-b3118f30c6bd
DescriptionCustomer has read, write, delete and modify NTFS permission access on Azure Storage file shares.
CreatedOn2023-03-23 20:49:03 UTC
UpdatedOn2023-04-06 19:23:16 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2023-04-10 17:41:51 change: DataActions DataActions: 'add Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read; add Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write; add Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete; add Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action; add Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/action; add Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/action'
2023-04-03 17:54:29 add: Role 69566ab7-960f-475b-8e7c-b3118f30c6bd
Permissions summary Effective control plane and data plane operations: 6 (unique operations)
•action: 3
•delete: 1
•read: 1
•write: 1

Actions: 0
Resolved control plane operations from Actions: 0
Effective control plane operations: 0

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15628

DataActions: 6
Resolved data plane operations: 6
Effective data plane operations: 6
•action: 3
•delete: 1
•read: 1
•write: 1

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3213
Actions n/a
NotActions n/a
DataActions
Operation Description
Microsoft.Storage/storageAccounts/fileServices/fileshares/files/deleteReturns the result of deleting a file/folder
Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/actionReturns the result of modifying permission on a file/folder
Microsoft.Storage/storageAccounts/fileServices/fileshares/files/readReturns a file/folder or a list of files/folders
Microsoft.Storage/storageAccounts/fileServices/fileshares/files/writeReturns the result of writing a file or creating a folder
Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/actionRead File Backup Sematics Privilege
Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/actionWrite File Backup Sematics Privilege
NotDataActions n/a
Used in
BuiltIn Policy		 none
JSON
api-version=2023-07-01-preview
Condition none