AzRoleAdvertizer

last sync: 2025-Jun-20 17:23:26 UTC

Management Group Reader

Azure BuiltIn RBAC Role definition

NameManagement Group Reader
Microsoft Learn
Idac63b705-f282-497d-ac71-919bf39d939d
DescriptionManagement Group Reader Role
CategoryManagement and governance
Microsoft Learn
CreatedOn2018-06-22 00:31:03 UTC
UpdatedOn2022-09-19 15:10:03 UTC
Permissions summary Effective control plane and data plane operations: 32 (unique operations)
•read: 32

Actions: 3
Resolved control plane operations from Actions: 32
Effective control plane operations: 32
•read: 32

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16665

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3565
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Management/managementGroups/readList management groups for the authenticated user.
Microsoft.Management/managementGroups/subscriptions/readLists subscription under the given management group.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2022-09-19 16:35:35 change: Actions Actions: 'add Microsoft.Authorization/*/read'
JSON
api-version=2023-07-01-preview
Condition none