AzRoleAdvertizer

last sync: 2025-Sep-22 17:22:47 UTC

Container Registry Configuration Reader and Data Access Configuration Reader

Azure BuiltIn RBAC Role definition

NameContainer Registry Configuration Reader and Data Access Configuration Reader
Microsoft Learn
Id69b07be0-09bf-439a-b9a6-e73de851bd59
DescriptionProvides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.
CategoryContainers
Microsoft Learn
CreatedOn2024-10-30 22:57:44 UTC
UpdatedOn2024-10-30 22:57:44 UTC
Permissions summary Effective control plane and data plane operations: 27 (unique operations)
•action: 6
•Delete: 1
•read: 18
•write: 2

Actions: 27
Resolved control plane operations from Actions: 27
Effective control plane operations: 27
•action: 6
•Delete: 1
•read: 18
•write: 2

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17158

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4064
Actions
Operation Description
Microsoft.ContainerRegistry/registries/connectedRegistries/readGets the properties of the specified connected registry or lists all the connected registries for the specified container registry.
Microsoft.ContainerRegistry/registries/listCredentials/actionLists the login credentials for the specified container registry.
Microsoft.ContainerRegistry/registries/operationStatuses/readGets a registry async operation status
Microsoft.ContainerRegistry/registries/privateEndpointConnections/operationStatuses/readGet Private Endpoint Connection Async Operation Status
Microsoft.ContainerRegistry/registries/privateEndpointConnections/readGets the properties of private endpoint connection or list all the private endpoint connections for the specified container registry
Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/readno description given
Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/writeno description given
Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/logDefinitions/readno description given
Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/metricDefinitions/readno description given
Microsoft.ContainerRegistry/registries/readGets the properties of the specified container registry or lists all the container registries under the specified resource group or subscription.
Microsoft.ContainerRegistry/registries/replications/operationStatuses/readGets a replication async operation status
Microsoft.ContainerRegistry/registries/replications/readGets the properties of the specified replication or lists all the replications for the specified container registry.
Microsoft.ContainerRegistry/registries/scopeMaps/operationStatuses/readGets a scope map async operation status.
Microsoft.ContainerRegistry/registries/scopeMaps/readGets the properties of the specified scope map or lists all the scope maps for the specified container registry.
Microsoft.ContainerRegistry/registries/tokens/operationStatuses/readGets a token async operation status.
Microsoft.ContainerRegistry/registries/tokens/readGets the properties of the specified token or lists all the tokens for the specified container registry.
Microsoft.ContainerRegistry/registries/webhooks/getCallbackConfig/actionGets the configuration of service URI and custom headers for the webhook.
Microsoft.ContainerRegistry/registries/webhooks/listEvents/actionLists recent events for the specified webhook.
Microsoft.ContainerRegistry/registries/webhooks/operationStatuses/readGets a webhook async operation status
Microsoft.ContainerRegistry/registries/webhooks/readGets the properties of the specified webhook or lists all the webhooks for the specified container registry.
Microsoft.Insights/AlertRules/Activated/ActionClassic metric alert activated
Microsoft.Insights/AlertRules/DeleteDelete a classic metric alert
Microsoft.Insights/AlertRules/Incidents/ReadRead a classic metric alert incident
Microsoft.Insights/AlertRules/ReadRead a classic metric alert
Microsoft.Insights/AlertRules/Resolved/ActionClassic metric alert resolved
Microsoft.Insights/AlertRules/Throttled/ActionClassic metric alert rule throttled
Microsoft.Insights/AlertRules/WriteCreate or update a classic metric alert
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2024-10-31 18:50:49 add: Role 69b07be0-09bf-439a-b9a6-e73de851bd59
JSON
api-version=2023-07-01-preview
 
{9 items
  • roleName: "Container Registry Configuration Reader and Data Access Configuration Reader",
  • type: "BuiltInRole",
  • description: "Provides permissions to list container registries and registry configuration properties. Provides permissions to list data access configuration such as admin user credentials, scope maps, and tokens, which can be used to read, write or delete repositories and images. Does not provide direct permissions to read, list, or write registry contents including repositories and images. Does not provide permissions to modify data plane content such as imports, Artifact Cache or Sync, and Transfer Pipelines. Does not provide permissions for managing Tasks.",
  • assignableScopes: [1 item
    • "/"
    ],
  • permissions: [1 item
    • {4 items
      • actions: [27 items
        • "Microsoft.ContainerRegistry/registries/operationStatuses/read",
        • "Microsoft.ContainerRegistry/registries/read",
        • "Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",
        • "Microsoft.ContainerRegistry/registries/privateEndpointConnections/operationStatuses/read",
        • "Microsoft.ContainerRegistry/registries/listCredentials/action",
        • "Microsoft.ContainerRegistry/registries/tokens/read",
        • "Microsoft.ContainerRegistry/registries/tokens/operationStatuses/read",
        • "Microsoft.ContainerRegistry/registries/scopeMaps/read",
        • "Microsoft.ContainerRegistry/registries/scopeMaps/operationStatuses/read",
        • "Microsoft.ContainerRegistry/registries/webhooks/read",
        • "Microsoft.ContainerRegistry/registries/webhooks/getCallbackConfig/action",
        • "Microsoft.ContainerRegistry/registries/webhooks/listEvents/action",
        • "Microsoft.ContainerRegistry/registries/webhooks/operationStatuses/read",
        • "Microsoft.ContainerRegistry/registries/replications/read",
        • "Microsoft.ContainerRegistry/registries/replications/operationStatuses/read",
        • "Microsoft.ContainerRegistry/registries/connectedRegistries/read",
        • "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/read",
        • "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/diagnosticSettings/write",
        • "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/logDefinitions/read",
        • "Microsoft.ContainerRegistry/registries/providers/Microsoft.Insights/metricDefinitions/read",
        • "Microsoft.Insights/AlertRules/Write",
        • "Microsoft.Insights/AlertRules/Delete",
        • "Microsoft.Insights/AlertRules/Read",
        • "Microsoft.Insights/AlertRules/Activated/Action",
        • "Microsoft.Insights/AlertRules/Resolved/Action",
        • "Microsoft.Insights/AlertRules/Throttled/Action",
        • "Microsoft.Insights/AlertRules/Incidents/Read"
        ],
      • notActions: [],
      • dataActions: [],
      • notDataActions: []
      }
    ],
  • createdOn: "2024-10-30T22:57:44.2162129Z",
  • updatedOn: "2024-10-30T22:57:44.2162129Z",
  • createdBy: null,
  • updatedBy: null
}
Condition none