last sync: 2025-Jun-13 17:22:48 UTC

Azure Deployment Stack Contributor

Azure BuiltIn RBAC Role definition

NameAzure Deployment Stack Contributor
Idbf7f8882-3383-422a-806a-6526c631a88a
DescriptionAllows a user to manage deployment stacks, but cannot create or delete deny assignments within the deployment stack.
CategoryNone
CreatedOn2024-05-15 23:13:06 UTC
UpdatedOn2025-06-05 00:56:22 UTC
Permissions summary Effective control plane and data plane operations: 51 (unique operations)
•Action: 9
•Delete: 2
•read: 37
•Write: 3

Actions: 8
Resolved control plane operations from Actions: 51
Effective control plane operations: 51
•Action: 9
•Delete: 2
•read: 37
•Write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16591

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3559
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Resources/deploymentStacks/exportTemplate/actionExport the template for a deployment stack
Microsoft.Resources/deploymentStacks/readGets or lists deployment stacks
Microsoft.Resources/deploymentStacks/validate/actionValidates a deployment stack.
Microsoft.Resources/deploymentStacks/writeCreates or updates a deployment stack
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-06-05 17:27:26 change: Actions Actions: 'add Microsoft.Resources/deploymentStacks/validate/action; add Microsoft.Resources/deploymentStacks/exportTemplate/action'
2024-05-16 18:05:17 add: Role bf7f8882-3383-422a-806a-6526c631a88a
JSON
api-version=2023-07-01-preview
Condition none