AzRoleAdvertizer

last sync: 2024-Apr-26 17:47:18 UTC

AcrQuarantineWriter

Azure BuiltIn RBAC Role definition

NameAcrQuarantineWriter
Idc8d4ff99-41c3-41a8-9f60-21dfdad59608
Descriptionacr quarantine data writer
CreatedOn2018-03-16 00:26:37 UTC
UpdatedOn2021-11-11 20:13:11 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2021-07-07 15:26:33 change: DataActions DataActions: 'add Microsoft.ContainerRegistry/registries/quarantinedArtifacts/read; add Microsoft.ContainerRegistry/registries/quarantinedArtifacts/write'
Permissions summary Effective control plane and data plane operations: 4 (unique operations)
•read: 2
•write: 2

Actions: 2
Resolved control plane operations from Actions: 2
Effective control plane operations: 2
•read: 1
•write: 1

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15384

DataActions: 2
Resolved data plane operations: 2
Effective data plane operations: 2
•read: 1
•write: 1

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3119
Actions
Operation Description
Microsoft.ContainerRegistry/registries/quarantine/readPull or Get quarantined images from container registry
Microsoft.ContainerRegistry/registries/quarantine/writeWrite/Modify quarantine state of quarantined images
NotActions n/a
DataActions
Operation Description
Microsoft.ContainerRegistry/registries/quarantinedArtifacts/readAllows pull or get of the quarantined artifacts from container registry. This is similar to Microsoft.ContainerRegistry/registries/quarantine/read except that it is a data action
Microsoft.ContainerRegistry/registries/quarantinedArtifacts/writeAllows write or update of the quarantine state of quarantined artifacts. This is similar to Microsoft.ContainerRegistry/registries/quarantine/write action except that it is a data action
NotDataActions n/a
Used in
BuiltIn Policy		 none
JSON
api-version=2022-05-01-preview
Condition none