AzRoleAdvertizer

last sync: 2025-Oct-15 17:22:44 UTC

Storage File Data SMB Admin

Azure BuiltIn RBAC Role definition

NameStorage File Data SMB Admin
Idbbf004e3-0e4b-4f86-ae4f-1f8fb47b357b
DescriptionAllows for admin access equivalent to storage account key for end users over SMB.
CategoryNone
CreatedOn2025-09-30 15:23:51 UTC
UpdatedOn2025-09-30 15:23:51 UTC
Permissions summary Effective control plane and data plane operations: 7 (unique operations)
•action: 4
•delete: 1
•read: 1
•write: 1

Actions: 0
Resolved control plane operations from Actions: 0
Effective control plane operations: 0

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17363

DataActions: 7
Resolved data plane operations: 7
Effective data plane operations: 7
•action: 4
•delete: 1
•read: 1
•write: 1

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4071
Actions n/a
NotActions n/a
DataActions
Operation Description
Microsoft.Storage/storageAccounts/fileServices/fileshares/files/deleteReturns the result of deleting a file/folder
Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/actionReturns the result of modifying permission on a file/folder
Microsoft.Storage/storageAccounts/fileServices/fileshares/files/readReturns a file/folder or a list of files/folders
Microsoft.Storage/storageAccounts/fileServices/fileshares/files/writeReturns the result of writing a file or creating a folder
Microsoft.Storage/storageAccounts/fileServices/readFileBackupSemantics/actionRead File Backup Semantics Privilege
Microsoft.Storage/storageAccounts/fileServices/takeOwnership/actionFile Take Ownership Privilege
Microsoft.Storage/storageAccounts/fileServices/writeFileBackupSemantics/actionWrite File Backup Semantics Privilege
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-09-30 17:22:42 add: Role bbf004e3-0e4b-4f86-ae4f-1f8fb47b357b
JSON
api-version=2023-07-01-preview
Condition none