AzRoleAdvertizer

last sync: 2025-Oct-30 18:22:48 UTC

Kubernetes Extension Contributor

Azure BuiltIn RBAC Role definition

NameKubernetes Extension Contributor
Microsoft Learn
Id85cb6faf-e071-4c9b-8136-154b5a04f717
DescriptionCan create, update, get, list and delete Kubernetes Extensions, and get extension async operations
CategoryContainers
Microsoft Learn
CreatedOn2021-08-09 19:47:50 UTC
UpdatedOn2025-10-28 15:14:12 UTC
Permissions summary Effective control plane and data plane operations: 54 (unique operations)
•: 1
•Action: 8
•Delete: 3
•read: 39
•Write: 3

Actions: 9
Resolved control plane operations from Actions: 54
Effective control plane operations: 54
•: 1
•Action: 8
•Delete: 3
•read: 39
•Write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17411

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4081
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
Microsoft.KubernetesConfiguration/extensions/deleteDeletes extension instance resource.
Microsoft.KubernetesConfiguration/extensions/operations/readGets Async Operation status.
Microsoft.KubernetesConfiguration/extensions/readGets extension instance resource.
Microsoft.KubernetesConfiguration/extensions/writeCreates or updates extension resource.
Microsoft.KubernetesConfiguration/register/actionRegisters subscription to Microsoft.KubernetesConfiguration resource provider.
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
Policy DisplayName Policy Id Category State
Configure Azure Arc enabled Kubernetes clusters to install the Azure Policy extension 0adc5395-9169-4b9b-8687-af838d69410a Kubernetes GA
History
Date/Time (UTC ymd) (i) Change Change detail
2025-10-28 18:22:45 change: Actions Actions: 'add Microsoft.KubernetesConfiguration/register/action'
2021-08-11 15:29:45 add: Role 85cb6faf-e071-4c9b-8136-154b5a04f717
JSON
api-version=2023-07-01-preview
Condition none