AzRoleAdvertizer

last sync: 2025-Jul-25 17:39:33 UTC

Lab Assistant

Azure BuiltIn RBAC Role definition

NameLab Assistant
Microsoft Learn
Idce40b423-cede-4313-a93f-9b28290b72e1
DescriptionThe lab assistant role
CategoryDevOps
Microsoft Learn
CreatedOn2021-11-11 00:56:10 UTC
UpdatedOn2021-11-11 20:15:29 UTC
Permissions summary Effective control plane and data plane operations: 61 (unique operations)
•Action: 12
•Delete: 2
•read: 45
•Write: 2

Actions: 17
Resolved control plane operations from Actions: 61
Effective control plane operations: 61
•Action: 12
•Delete: 2
•read: 45
•Write: 2

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16817

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3579
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
Microsoft.LabServices/labPlans/images/readGet the properties of an image.
Microsoft.LabServices/labPlans/readGet the properties of a lab plan.
Microsoft.LabServices/labs/readGet the properties of a lab.
Microsoft.LabServices/labs/schedules/readGet the properties of a schedule.
Microsoft.LabServices/labs/users/invite/actionSend email invitation to a user to join the lab.
Microsoft.LabServices/labs/users/readGet the properties of a user.
Microsoft.LabServices/labs/virtualMachines/readGet the properties of a virtual machine.
Microsoft.LabServices/labs/virtualMachines/redeploy/actionRedeploy a virtual machine to a different compute node.
Microsoft.LabServices/labs/virtualMachines/reimage/actionReimage a virtual machine to the last published image.
Microsoft.LabServices/labs/virtualMachines/start/actionStart a virtual machine.
Microsoft.LabServices/labs/virtualMachines/stop/actionStop and deallocate a virtual machine.
Microsoft.LabServices/locations/usages/readGet Usage in a location
Microsoft.LabServices/skus/readGet the properties of a Lab Services SKU.
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2021-11-11 17:21:27 add: Role ce40b423-cede-4313-a93f-9b28290b72e1
JSON
api-version=2023-07-01-preview
 
{9 items
  • roleName: "Lab Assistant",
  • type: "BuiltInRole",
  • description: "The lab assistant role",
  • assignableScopes: [1 item
    • "/"
    ],
  • permissions: [1 item
    • {4 items
      • actions: [17 items
        • "Microsoft.Authorization/*/read",
        • "Microsoft.Insights/alertRules/*",
        • "Microsoft.LabServices/labPlans/images/read",
        • "Microsoft.LabServices/labPlans/read",
        • "Microsoft.LabServices/labs/read",
        • "Microsoft.LabServices/labs/schedules/read",
        • "Microsoft.LabServices/labs/users/read",
        • "Microsoft.LabServices/labs/users/invite/action",
        • "Microsoft.LabServices/labs/virtualMachines/read",
        • "Microsoft.LabServices/labs/virtualMachines/start/action",
        • "Microsoft.LabServices/labs/virtualMachines/stop/action",
        • "Microsoft.LabServices/labs/virtualMachines/reimage/action",
        • "Microsoft.LabServices/labs/virtualMachines/redeploy/action",
        • "Microsoft.LabServices/locations/usages/read",
        • "Microsoft.LabServices/skus/read",
        • "Microsoft.Resources/deployments/*",
        • "Microsoft.Resources/subscriptions/resourceGroups/read"
        ],
      • notActions: [],
      • dataActions: [],
      • notDataActions: []
      }
    ],
  • createdOn: "2021-11-11T00:56:10.4295443Z",
  • updatedOn: "2021-11-11T20:15:29.144253Z",
  • createdBy: null,
  • updatedBy: null
}
Condition none