AzRoleAdvertizer

last sync: 2025-Apr-29 17:15:48 UTC

DNS Zone Contributor

Azure BuiltIn RBAC Role definition

Name

DNS Zone Contributor
Microsoft Learn

befefa01-2a29-4197-83a8-272ff33ce314

Description

Lets you manage DNS zones and record sets in Azure DNS, but does not let you control who has access to them.

Category

Networking
Microsoft Learn

CreatedOn

2015-10-15 23:33:25 UTC

UpdatedOn

2021-11-11 20:13:32 UTC

Permissions summary

Effective control plane and data plane operations: 104 (unique operations)
•Action: 10
•Delete: 15
•read: 61
•Write: 18

Actions: 7
Resolved control plane operations from Actions: 104
Effective control plane operations: 104
•Action: 10
•Delete: 15
•read: 61
•Write: 18

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16386

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3371

Actions

Operation	Description
Microsoft.Authorization/*/read	wildcarded / no description
Microsoft.Insights/alertRules/*	wildcarded / no description
Microsoft.Network/dnsZones/*	wildcarded / no description
Microsoft.ResourceHealth/availabilityStatuses/read	Gets the availability statuses for all resources in the specified scope
Microsoft.Resources/deployments/*	wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/read	Gets or lists resource groups.
Microsoft.Support/*	wildcarded / no description

NotActions

n/a

DataActions

n/a

NotDataActions

n/a

Used in
BuiltIn Policy

none

History

none

JSON

api-version=2023-07-01-preview

Condition

none