last sync: 2025-Oct-29 18:22:49 UTC

Azure Kubernetes Fleet Manager RBAC Admin for Member Clusters

Azure BuiltIn RBAC Role definition

NameAzure Kubernetes Fleet Manager RBAC Admin for Member Clusters
Idd1f699ed-700a-4c77-a22f-29890ac7b115
DescriptionThis role grants admin access - provides write permissions on most objects within a namespace, with the exception of ResourceQuota object and the namespace object itself. Applying this role at cluster scope will give access across all namespaces.
CategoryNone
CreatedOn2025-10-22 18:33:37 UTC
UpdatedOn2025-10-22 18:33:37 UTC
Permissions summary Effective control plane and data plane operations: 344 (unique operations)
•action: 10
•delete: 56
•read: 216
•write: 62

Actions: 4
Resolved control plane operations from Actions: 34
Effective control plane operations: 34
•read: 34

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17402

DataActions: 1
Resolved data plane operations: 314
Effective data plane operations: 310
•action: 10
•delete: 56
•read: 182
•write: 62

NotDataActions: 4
Resolved data plane operations from NotDataActions: 4
Effective denied data plane operations: 3771
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Resources/subscriptions/operationresults/readGet the subscription operation results.
Microsoft.Resources/subscriptions/readGets the list of subscriptions.
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions
Operation Description
Microsoft.ContainerService/fleets/members/*wildcarded / no description
NotDataActions
Operation Description
Microsoft.ContainerService/fleets/members/namespaces/deleteDeletes namespaces
Microsoft.ContainerService/fleets/members/namespaces/writeWrites namespaces
Microsoft.ContainerService/fleets/members/resourcequotas/deleteDeletes resourcequotas
Microsoft.ContainerService/fleets/members/resourcequotas/writeWrites resourcequotas
Used in
BuiltIn Policy
none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-10-23 17:22:49 add: Role d1f699ed-700a-4c77-a22f-29890ac7b115
JSON
api-version=2023-07-01-preview
Condition none