AzRoleAdvertizer

last sync: 2025-Oct-28 18:22:45 UTC

VM Scanner Operator

Azure BuiltIn RBAC Role definition

NameVM Scanner Operator
Idd24ecba3-c1f4-40fa-a7bb-4588a071e8fd
DescriptionRole that provides access to disk snapshot for security analysis.
CategoryNone
CreatedOn2022-05-15 19:19:38 UTC
UpdatedOn2024-09-09 15:09:55 UTC
Permissions summary Effective control plane and data plane operations: 10 (unique operations)
•action: 1
•read: 9

Actions: 10
Resolved control plane operations from Actions: 10
Effective control plane operations: 10
•action: 1
•read: 9

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17436

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4081
Actions
Operation Description
Microsoft.Compute/diskEncryptionSets/readGet the properties of a disk encryption set
Microsoft.Compute/disks/beginGetAccess/actionGet the SAS URI of the Disk for blob access
Microsoft.Compute/disks/readGet the properties of a Disk
Microsoft.Compute/virtualMachines/instanceView/readGets the detailed runtime status of the virtual machine and its resources
Microsoft.Compute/virtualMachines/readGet the properties of a virtual machine
Microsoft.Compute/virtualMachineScaleSets/instanceView/readGets the instance view of the Virtual Machine Scale Set
Microsoft.Compute/virtualMachineScaleSets/readGet the properties of a Virtual Machine Scale Set
Microsoft.Compute/virtualMachineScaleSets/virtualMachines/instanceView/readRetrieves the instance view of a Virtual Machine in a VM Scale Set.
Microsoft.Compute/virtualMachineScaleSets/virtualMachines/readRetrieves the properties of a Virtual Machine in a VM Scale Set
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2024-09-09 17:51:20 change: Actions Actions: 'add Microsoft.Resources/subscriptions/resourceGroups/read'
2024-03-05 19:57:52 change: Actions Actions: 'add Microsoft.Compute/diskEncryptionSets/read'
2022-06-08 16:32:24 add: Role d24ecba3-c1f4-40fa-a7bb-4588a071e8fd
JSON
api-version=2023-07-01-preview
Condition none