AzRoleAdvertizer

last sync: 2024-May-08 17:44:38 UTC

HDInsight on AKS Cluster Admin

Azure BuiltIn RBAC Role definition

NameHDInsight on AKS Cluster Admin
Idfd036e6b-1266-47a0-b0bb-a05d04831731
DescriptionGrants a user/group the ability to create, delete and manage clusters within a given cluster pool. Cluster Admin can also run workloads, monitor, and manage all user activity on these clusters.
CreatedOn2022-04-14 07:38:22 UTC
UpdatedOn2024-03-26 15:15:04 UTC
History
Date/Time (UTC ymd) (i) Change Change detail
2024-03-26 18:41:13 change: Actions Actions: 'add Microsoft.Authorization/*/read; add Microsoft.HDInsight/clusterPools/clusters/availableupgrades/read; add Microsoft.HDInsight/clusterPools/clusters/upgrade/action'
2023-09-05 17:58:04 change: Actions Actions: 'add Microsoft.Resources/deployments/validate/action; add Microsoft.Resources/deployments/write; add Microsoft.Resources/deployments/exportTemplate/action'
2023-08-25 17:59:51 add: Role fd036e6b-1266-47a0-b0bb-a05d04831731
Permissions summary Effective control plane and data plane operations: 56 (unique operations)
•action: 8
•delete: 2
•read: 43
•write: 3

Actions: 30
Resolved control plane operations from Actions: 56
Effective control plane operations: 56
•action: 8
•delete: 2
•read: 43
•write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 15550

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3081
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.HDInsight/clusterPools/clusters/availableupgrades/readGet Avaliable Upgrades for HDInsight on AKS Cluster
Microsoft.HDInsight/clusterPools/clusters/deleteDelete a HDInsight on AKS cluster
Microsoft.HDInsight/clusterpools/clusters/instanceviews/readGet details about HDInsight on AKS Cluster Instance View
Microsoft.HDInsight/clusterPools/clusters/jobs/readList HDInsight on AKS Cluster Jobs
Microsoft.HDInsight/clusterPools/clusters/readGet details about HDInsight on AKS Cluster
Microsoft.HDInsight/clusterPools/clusters/resize/actionResize a HDInsight on AKS Cluster
Microsoft.HDInsight/clusterPools/clusters/runjob/actionRun HDInsight on AKS Cluster Job
Microsoft.HDInsight/clusterpools/clusters/serviceconfigs/readGet details about HDInsight on AKS Cluster Service Configurations
Microsoft.HDInsight/clusterPools/clusters/upgrade/actionUpgrade HDInsight on AKS Cluster
Microsoft.HDInsight/clusterPools/clusters/writeCreate or Update HDInsight on AKS Cluster
Microsoft.Insights/AlertRules/Activated/ActionClassic metric alert activated
Microsoft.Insights/AlertRules/DeleteDelete a classic metric alert
Microsoft.Insights/AlertRules/Incidents/ReadRead a classic metric alert incident
Microsoft.Insights/AlertRules/ReadRead a classic metric alert
Microsoft.Insights/AlertRules/Resolved/ActionClassic metric alert resolved
Microsoft.Insights/AlertRules/Throttled/ActionClassic metric alert rule throttled
Microsoft.Insights/AlertRules/WriteCreate or update a classic metric alert
Microsoft.Insights/logs/readReading data from all your logs
Microsoft.Insights/metrics/readRead metrics
Microsoft.ResourceHealth/availabilityStatuses/readGets the availability statuses for all resources in the specified scope
Microsoft.Resources/deployments/*/readwildcarded / no description
Microsoft.Resources/deployments/exportTemplate/actionExport template for a deployment
Microsoft.Resources/deployments/operations/readGets or lists deployment operations.
Microsoft.Resources/deployments/readGets or lists deployments.
Microsoft.Resources/deployments/validate/actionValidates an deployment.
Microsoft.Resources/deployments/writeCreates or updates an deployment.
Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/readGets or lists deployment operations.
Microsoft.Resources/subscriptions/resourcegroups/deployments/readGets or lists deployments.
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
JSON
api-version=2023-07-01-preview
Condition none