AzRoleAdvertizer

last sync: 2025-Apr-29 17:15:48 UTC

Classic Virtual Machine Contributor

Azure BuiltIn RBAC Role definition

NameClassic Virtual Machine Contributor
Microsoft Learn
Idd73bb868-a0df-4d4d-bd69-98a00b01fccb
DescriptionLets you manage classic virtual machines, but not access to them, and not the virtual network or storage account they're connected to.
CategoryCompute
Microsoft Learn
CreatedOn2015-04-25 00:37:56 UTC
UpdatedOn2021-11-11 20:13:27 UTC
Permissions summary Effective control plane and data plane operations: 163 (unique operations)
•action: 35
•delete: 11
•read: 93
•write: 24

Actions: 17
Resolved control plane operations from Actions: 163
Effective control plane operations: 163
•action: 35
•delete: 11
•read: 93
•write: 24

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16327

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3371
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.ClassicCompute/domainNames/*wildcarded / no description
Microsoft.ClassicCompute/virtualMachines/*wildcarded / no description
Microsoft.ClassicNetwork/networkSecurityGroups/join/actionno description given
Microsoft.ClassicNetwork/reservedIps/link/actionLink a reserved Ip
Microsoft.ClassicNetwork/reservedIps/readGets the reserved Ips
Microsoft.ClassicNetwork/virtualNetworks/join/actionJoins the virtual network.
Microsoft.ClassicNetwork/virtualNetworks/readGet the virtual network.
Microsoft.ClassicStorage/storageAccounts/disks/readReturns the storage account disk.
Microsoft.ClassicStorage/storageAccounts/images/readReturns the storage account image. (Deprecated. Use 'Microsoft.ClassicStorage/storageAccounts/vmImages')
Microsoft.ClassicStorage/storageAccounts/listKeys/actionLists the access keys for the storage accounts.
Microsoft.ClassicStorage/storageAccounts/readReturn the storage account with the given account.
Microsoft.Insights/alertRules/*wildcarded / no description
Microsoft.ResourceHealth/availabilityStatuses/readGets the availability statuses for all resources in the specified scope
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
Microsoft.Support/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
Historynone
JSON
api-version=2023-07-01-preview
Condition none