last sync: 2024-May-24 18:02:49 UTC

Azure Kubernetes Service Contributor Role

Azure BuiltIn RBAC Role definition

NameAzure Kubernetes Service Contributor Role
DescriptionGrants access to read and write Azure Kubernetes Service clusters
CreatedOn2020-02-27 19:27:15 UTC
UpdatedOn2021-11-11 20:14:21 UTC
Date/Time (UTC ymd) (i) Change Change detail
2020-02-28 09:58:27 add: Role ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8
Permissions summary Effective control plane and data plane operations: 11 (unique operations)
•action: 4
•delete: 1
•read: 4
•write: 2

Actions: 3
Resolved control plane operations from Actions: 11
Effective control plane operations: 11
•action: 4
•delete: 1
•read: 4
•write: 2

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15639

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3160
Operation Description
Microsoft.ContainerService/managedClusters/readGet a managed cluster
Microsoft.ContainerService/managedClusters/writeCreates a new managed cluster or updates an existing one
Microsoft.Resources/deployments/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
Policy DisplayName Policy Id Category State
[Preview]: Deploy Image Integrity on Azure Kubernetes Service 5dc99dae-cfb2-42cc-8762-9aae02b74e27 Kubernetes GA
Configure Microsoft Entra ID integrated Azure Kubernetes Service Clusters with required Admin Group Access 36a27de4-199b-40fb-b336-945a8475d6c5 Kubernetes GA
Configure Node OS Auto upgrade on Azure Kubernetes Cluster 40f1aee2-4db4-4b74-acb1-c6972e24cca8 Kubernetes GA
Deploy Azure Policy Add-on to Azure Kubernetes Service clusters a8eff44f-8c92-45c3-a3fb-9880802d67a7 Kubernetes GA
Deploy Image Cleaner on Azure Kubernetes Service 7e49285c-4bed-4564-b26a-5225ccc311f3 Kubernetes GA
Disable Command Invoke on Azure Kubernetes Service clusters 1b708b0a-3380-40e9-8b79-821f9fa224cc Kubernetes GA
Condition none