| Name | AVS Orchestrator Role | |||||||||
| Id | d715fb95-a0f0-4f1c-8be6-5ad2d2767f67 | |||||||||
| Description | Do not remove this role from your resource group because it is critical to enable your AVS private cloud to operate. If the role is removed, it will cause your AVS private cloud control plane to no longer operate correctly. The role is used to enable the AVS private cloud control plane to create the supporting resources in the resource group of the private clouds attached virtual network and bind them to the attached virtual network. This role is not intended for use cases outside of assignment to the associated AVS identity in your entra-id tenant. | |||||||||
| Category | None | |||||||||
| CreatedOn | 2024-08-27 15:13:33 UTC | |||||||||
| UpdatedOn | 2025-02-13 20:38:23 UTC | |||||||||
| Permissions summary | Effective control plane and data plane operations: 56 (unique operations) •action: 8 •delete: 13 •read: 20 •write: 15 Actions: 58 Resolved control plane operations from Actions: 56 Effective control plane operations: 56 •action: 8 •delete: 13 •read: 20 •write: 15 NotActions: 0 Resolved control plane operations from NotActions: 0 Effective denied control plane operations: 16434 DataActions: 0 Resolved data plane operations: 0 Effective data plane operations: 0 NotDataActions: 0 Resolved data plane operations from NotDataActions: 0 Effective denied data plane operations: 3371 |
|||||||||
| Actions | ||||||||||
| NotActions | n/a | |||||||||
| DataActions | n/a | |||||||||
| NotDataActions | n/a | |||||||||
| Used in BuiltIn Policy |
none | |||||||||
| History |
|
|||||||||
| JSON |
|
|||||||||
| Condition |
( ! ( ActionMatches { 'Microsoft.Authorization/roleAssignments/delete' } ) ) OR@Resource[Microsoft.Authorization/roleAssignments:RoleDefinitionId] ForAnyOfAnyValues:GuidEquals { d715fb95-a0f0-4f1c-8be6-5ad2d2767f67 (AVS Orchestrator Role), 4d97b98b-1d4f-4787-a291-c67834d212e7 (Network Contributor), 49fc33c1-886f-4b21-a00e-1d9993234734 (AVS on Fleet VIS Role) } |