AzRoleAdvertizer

last sync: 2020-Sep-18 14:08:07 UTC

Azure Role

Backup Reader

Role Name Backup Reader
Role Id a795c7a0-d4a2-40c1-ae25-d81f01202912
Role Description Can view backup services, but can't make changes
Role Changes no changes
Actions
Operation Description Used in other Role(s)
Microsoft.Authorization/*/read API Management Service Contributor, API Management Service Operator Role, API Management Service Reader Role , Application Insights Component Contributor, Application Insights Snapshot Debugger, Automation Job Operator, Automation Runbook Operator, Automation Operator, Avere Contributor, Backup Contributor, Billing Reader, Backup Operator, BizTalk Contributor, CDN Endpoint Contributor, CDN Endpoint Reader, CDN Profile Contributor, CDN Profile Reader, Classic Network Contributor, Classic Storage Account Contributor, ClearDB MySQL DB Contributor, Classic Virtual Machine Contributor, Cognitive Services Contributor, Cosmos DB Account Reader Role, Data Box Contributor, Data Box Reader, Data Factory Contributor, Data Lake Analytics Developer, DevTest Labs User, DocumentDB Account Contributor, DNS Zone Contributor, EventGrid EventSubscription Contributor, EventGrid EventSubscription Reader, Intelligent Systems Account Contributor, Key Vault Contributor, Lab Creator, Logic App Operator, Logic App Contributor, Managed Identity Operator, Managed Identity Contributor, Network Contributor, New Relic APM Account Contributor, Redis Cache Contributor, Scheduler Job Collections Contributor, Search Service Contributor, Security Admin, Security Manager (Legacy), Security Reader, Site Recovery Contributor, Site Recovery Operator, Site Recovery Reader, SQL Managed Instance Contributor, SQL DB Contributor, SQL Security Manager, Storage Account Contributor, SQL Server Contributor, Support Request Contributor, Traffic Manager Contributor, Virtual Machine Contributor, Web Plan Contributor, Website Contributor, HDInsight Cluster Operator, Cosmos DB Operator, Private DNS Zone Contributor, Blueprint Contributor, Blueprint Operator, Azure Sentinel Contributor, Azure Sentinel Responder, Azure Sentinel Reader, SignalR AccessKey Reader, SignalR Contributor, Kubernetes Cluster - Azure Arc Onboarding, Tag Contributor, Integration Service Environment Developer, Integration Service Environment Contributor, Marketplace Admin, Key Vault Administrator (preview), Key Vault Crypto Officer (preview), Key Vault Secrets Officer (preview), Key Vault Certificates Officer (preview), Key Vault Reader (preview), Azure Arc Kubernetes Viewer, Azure Arc Kubernetes Writer, Azure Arc Kubernetes Cluster Admin, Azure Arc Kubernetes Admin, Azure Kubernetes Service RBAC Cluster Admin, Azure Kubernetes Service RBAC Admin, Azure Kubernetes Service RBAC Reader, Azure Kubernetes Service RBAC Writer, Azure Arc Enabled Kubernetes Cluster User Role, Collaborative Data Contributor, Device Update Reader, Device Update Administrator, Device Update Content Administrator, Device Update Deployments Administrator, Device Update Deployments Reader, Device Update Content Reader
Microsoft.RecoveryServices/locations/allocatedStamp/read GetAllocatedStamp is internal operation used by service Site Recovery Contributor, Site Recovery Operator, Site Recovery Reader
Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read Returns status of the operation Backup Operator
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read Gets result of Operation performed on Protection Container. Backup Operator
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read Gets Result of Operation Performed on Protected Items. Backup Operator
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read Returns the status of Operation performed on Protected Items. Backup Operator
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read Returns object details of the Protected Item Backup Operator, Virtual Machine Contributor
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read Get Recovery Points for Protected Items. Backup Operator
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read Returns all registered containers Backup Operator
Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read Returns the Result of Job Operation.
Microsoft.RecoveryServices/Vaults/backupJobs/read Returns all Job Objects
Microsoft.RecoveryServices/Vaults/backupJobsExport/action Export Jobs Backup Contributor, Backup Operator
Microsoft.RecoveryServices/Vaults/backupOperationResults/read Returns Backup Operation Result for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read Get Results of Policy Operation. Backup Operator
Microsoft.RecoveryServices/Vaults/backupPolicies/read Returns all Protection Policies Backup Operator, Virtual Machine Contributor
Microsoft.RecoveryServices/Vaults/backupProtectedItems/read Returns the list of all Protected Items. Backup Operator
Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read Returns all containers belonging to the subscription Backup Operator
Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read Returns summaries for Protected Items and Protected Servers for a Recovery Services . Backup Contributor, Backup Operator
Microsoft.RecoveryServices/Vaults/extendedInformation/read The Get Extended Info operation gets an object's Extended Info representing the Azure resource of type ?vault? Backup Operator, Site Recovery Operator, Site Recovery Reader
Microsoft.RecoveryServices/Vaults/monitoringAlerts/read Gets the alerts for the Recovery services vault. Backup Contributor, Backup Operator, Site Recovery Reader
Microsoft.RecoveryServices/Vaults/read The Get Vault operation gets an object representing the Azure resource of type 'vault' Backup Contributor, Backup Operator, Site Recovery Contributor , Site Recovery Operator, Site Recovery Reader, Virtual Machine Contributor
Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read The Get Operation Results operation can be used get the operation status and result for the asynchronously submitted operation Backup Operator, Site Recovery Operator, Site Recovery Reader
Microsoft.RecoveryServices/Vaults/registeredIdentities/read The Get Containers operation can be used get the containers registered for a resource. Backup Operator, Site Recovery Operator, Site Recovery Reader
Microsoft.RecoveryServices/Vaults/backupstorageconfig/read Returns Storage Configuration for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupconfig/read Returns Configuration for Recovery Services Vault.
Microsoft.RecoveryServices/Vaults/backupOperations/read Returns Backup Operation Status for Recovery Services Vault. Backup Contributor, Backup Operator
Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read Get Status of Policy Operation. Backup Operator
Microsoft.RecoveryServices/Vaults/backupEngines/read Returns all the backup management servers registered with vault. Backup Contributor, Backup Operator
Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read Get a backup Protection Intent Backup Operator
Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read Get all items in a container Backup Operator
Microsoft.RecoveryServices/locations/backupStatus/action Check Backup Status for Recovery Services Vaults Backup Contributor, Backup Operator
Microsoft.RecoveryServices/Vaults/monitoringConfigurations/* Backup Contributor, Backup Operator
Microsoft.RecoveryServices/Vaults/monitoringAlerts/write Resolves the alert. Backup Contributor, Backup Operator
Microsoft.RecoveryServices/operations/read Operation returns the list of Operations for a Resource Provider Backup Contributor, Backup Operator
Microsoft.RecoveryServices/locations/operationStatus/read Gets Operation Status for a given Operation Backup Contributor, Backup Operator
Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read List all backup Protection Intents Backup Contributor, Backup Operator
Microsoft.RecoveryServices/Vaults/usages/read Read any Vault Usages Backup Operator, Site Recovery Contributor, Site Recovery Operator , Site Recovery Reader, Virtual Machine Contributor
Microsoft.RecoveryServices/locations/backupValidateFeatures/action Validate Features Backup Contributor, Backup Operator
NotActions
DataActions
NotDataActions
Used in Policy
Role Definition (Json) 
{
  "Name": "Backup Reader",
  "Id": "a795c7a0-d4a2-40c1-ae25-d81f01202912",
  "IsCustom": false,
  "Description": "Can view backup services, but can't make changes",
  "Actions": [
    "Microsoft.Authorization/*/read",
    "Microsoft.RecoveryServices/locations/allocatedStamp/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read",
    "Microsoft.RecoveryServices/Vaults/backupJobs/operationResults/read",
    "Microsoft.RecoveryServices/Vaults/backupJobs/read",
    "Microsoft.RecoveryServices/Vaults/backupJobsExport/action",
    "Microsoft.RecoveryServices/Vaults/backupOperationResults/read",
    "Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read",
    "Microsoft.RecoveryServices/Vaults/backupPolicies/read",
    "Microsoft.RecoveryServices/Vaults/backupProtectedItems/read",
    "Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read",
    "Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read",
    "Microsoft.RecoveryServices/Vaults/extendedInformation/read",
    "Microsoft.RecoveryServices/Vaults/monitoringAlerts/read",
    "Microsoft.RecoveryServices/Vaults/read",
    "Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read",
    "Microsoft.RecoveryServices/Vaults/registeredIdentities/read",
    "Microsoft.RecoveryServices/Vaults/backupstorageconfig/read",
    "Microsoft.RecoveryServices/Vaults/backupconfig/read",
    "Microsoft.RecoveryServices/Vaults/backupOperations/read",
    "Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read",
    "Microsoft.RecoveryServices/Vaults/backupEngines/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read",
    "Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read",
    "Microsoft.RecoveryServices/locations/backupStatus/action",
    "Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*",
    "Microsoft.RecoveryServices/Vaults/monitoringAlerts/write",
    "Microsoft.RecoveryServices/operations/read",
    "Microsoft.RecoveryServices/locations/operationStatus/read",
    "Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read",
    "Microsoft.RecoveryServices/Vaults/usages/read",
    "Microsoft.RecoveryServices/locations/backupValidateFeatures/action"
  ],
  "NotActions": [
    
  ],
  "DataActions": [
    
  ],
  "NotDataActions": [
    
  ],
  "AssignableScopes": [
    "/"
  ]
}