AzRoleAdvertizer

last sync: 2025-Oct-15 17:22:44 UTC

Azure Red Hat OpenShift Cloud Controller Manager

Azure BuiltIn RBAC Role definition

NameAzure Red Hat OpenShift Cloud Controller Manager
Microsoft Learn
Ida1f96423-95ce-4224-ab27-4e3dc72facd4
DescriptionManage and update the cloud controller manager deployed on top of OpenShift.
CategoryContainers
Microsoft Learn
CreatedOn2024-01-30 16:11:37 UTC
UpdatedOn2025-09-23 15:14:52 UTC
Permissions summary Effective control plane and data plane operations: 27 (unique operations)
•action: 12
•delete: 1
•read: 8
•write: 6

Actions: 28
Resolved control plane operations from Actions: 27
Effective control plane operations: 27
•action: 12
•delete: 1
•read: 8
•write: 6

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17336

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.Compute/virtualMachines/readGet the properties of a virtual machine
Microsoft.Network/applicationSecurityGroups/joinNetworkSecurityRule/actionJoins a Security Rule to Application Security Groups. Not alertable.
Microsoft.Network/loadBalancers/backendAddressPools/join/actionJoins a load balancer backend address pool. Not Alertable.
Microsoft.Network/loadBalancers/inboundNatRules/join/actionJoins a load balancer inbound nat rule. Not Alertable.
Microsoft.Network/loadBalancers/loadBalancingRules/readGets a load balancer load balancing rule definition
Microsoft.Network/loadBalancers/readGets a load balancer definition
Microsoft.Network/loadBalancers/writeCreates a load balancer or updates an existing load balancer
Microsoft.Network/natGateways/join/actionJoins a NAT Gateway
Microsoft.Network/networkIntentPolicies/join/actionJoins a Network Intent Policy. Not alertable.
Microsoft.Network/networkInterfaces/readGets a network interface definition.
Microsoft.Network/networkInterfaces/writeCreates a network interface or updates an existing network interface.
Microsoft.Network/networkManagers/ipamPools/associateResourcesToPool/actionAction permission for associate resources to Ipam Pool
Microsoft.Network/networkSecurityGroups/join/actionJoins a network security group. Not Alertable.
Microsoft.Network/networkSecurityGroups/join/actionJoins a network security group. Not Alertable.
Microsoft.Network/networkSecurityGroups/readGets a network security group definition
Microsoft.Network/networkSecurityGroups/writeCreates a network security group or updates an existing network security group
Microsoft.Network/privatelinkservices/deleteDeletes an private link service resource.
Microsoft.Network/privatelinkservices/readGets an private link service resource.
Microsoft.Network/privatelinkservices/writeCreates a new private link service, or updates an existing private link service.
Microsoft.Network/publicIPAddresses/join/actionJoins a public ip address. Not Alertable.
Microsoft.Network/publicIPAddresses/readGets a public ip address definition.
Microsoft.Network/publicIPAddresses/writeCreates a public Ip address or updates an existing public Ip address.
Microsoft.Network/publicIPPrefixes/join/actionJoins a PublicIPPrefix. Not alertable.
Microsoft.Network/routeTables/join/actionJoins a route table. Not Alertable.
Microsoft.Network/serviceEndpointPolicies/join/actionJoins a Service Endpoint Policy. Not alertable.
Microsoft.Network/virtualNetworks/subnets/join/actionJoins a virtual network. Not Alertable.
Microsoft.Network/virtualNetworks/subnets/readGets a virtual network subnet definition
Microsoft.Network/virtualNetworks/subnets/writeCreates a virtual network subnet or updates an existing virtual network subnet
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-09-23 17:23:25 change: Actions Actions: 'add Microsoft.Network/virtualNetworks/subnets/write; add Microsoft.Network/privatelinkservices/write; add Microsoft.Network/privatelinkservices/read; add Microsoft.Network/privatelinkservices/delete; add Microsoft.Network/loadBalancers/loadBalancingRules/read; add Microsoft.Network/serviceEndpointPolicies/join/action; add Microsoft.Network/natGateways/join/action; add Microsoft.Network/networkIntentPolicies/join/action; add Microsoft.Network/routeTables/join/action; add Microsoft.Network/networkManagers/ipamPools/associateResourcesToPool/action'
2025-03-11 18:29:19 change: DisplayName, Actions New DisplayName: 'Azure Red Hat OpenShift Cloud Controller Manager'
Old DisplayName: 'Azure RedHat OpenShift Cloud Controller Manager Role',
Actions: 'add Microsoft.Network/loadBalancers/inboundNatRules/join/action; add Microsoft.Network/networkSecurityGroups/join/action; add Microsoft.Network/publicIPPrefixes/join/action; add Microsoft.Network/applicationSecurityGroups/joinNetworkSecurityRule/action'
2024-04-15 17:47:24 change: Actions Actions: 'add Microsoft.Compute/virtualMachines/read; add Microsoft.Network/loadBalancers/read; add Microsoft.Network/loadBalancers/write; add Microsoft.Network/networkInterfaces/read; add Microsoft.Network/networkSecurityGroups/read; add Microsoft.Network/networkSecurityGroups/write; add Microsoft.Network/publicIPAddresses/join/action; add Microsoft.Network/publicIPAddresses/read; add Microsoft.Network/publicIPAddresses/write; add Microsoft.Network/virtualNetworks/subnets/join/action; add Microsoft.Network/virtualNetworks/subnets/read; add Microsoft.Network/loadBalancers/backendAddressPools/join/action; add Microsoft.Network/networkInterfaces/write'
2024-01-31 19:57:40 add: Role a1f96423-95ce-4224-ab27-4e3dc72facd4
JSON
api-version=2023-07-01-preview
Condition none