AzRoleAdvertizer

last sync: 2025-Apr-29 17:15:48 UTC

App Compliance Automation Reader

Azure BuiltIn RBAC Role definition

NameApp Compliance Automation Reader
Microsoft Learn
Idffc6bbe0-e443-4c3b-bf54-26581bb2f78e
DescriptionAllows read-only access to App Compliance Automation tool for Microsoft 365
CategorySecurity
Microsoft Learn
CreatedOn2023-04-13 05:31:14 UTC
UpdatedOn2025-04-18 16:21:59 UTC
Permissions summary Effective control plane and data plane operations: 7096 (unique operations)
•read: 7096

Actions: 1
Resolved control plane operations from Actions: 7096
Effective control plane operations: 7096
•read: 7096

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 9394

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3371
Actions
Operation Description
*/readwildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2023-09-27 18:00:22 change: Actions Actions: 'remove Microsoft.AppComplianceAutomation/*/read; remove Microsoft.Storage/storageAccounts/read; remove Microsoft.Storage/storageAccounts/blobServices/containers/read; remove Microsoft.Storage/storageAccounts/blobServices/read; remove Microsoft.Resources/resources/read; remove Microsoft.Resources/subscriptions/read; remove Microsoft.Resources/subscriptions/resources/read; remove Microsoft.Resources/subscriptions/resourceGroups/read; remove Microsoft.Resources/subscriptions/resourceGroups/resources/read; remove Microsoft.Resources/tags/read; add */read'
2023-07-19 17:56:20 change: Actions Actions: 'add Microsoft.Resources/resources/read; add Microsoft.Resources/subscriptions/read; add Microsoft.Resources/subscriptions/resources/read; add Microsoft.Resources/subscriptions/resourceGroups/read; add Microsoft.Resources/subscriptions/resourceGroups/resources/read; add Microsoft.Resources/tags/read'
2023-05-30 17:42:57 change: Description, Actions New Description: 'Read, download the reports objects and related other resource objects.'
Old Description: 'App Compliance Automation Reader Role',
Actions: 'add Microsoft.Storage/storageAccounts/read; add Microsoft.Storage/storageAccounts/blobServices/containers/read; add Microsoft.Storage/storageAccounts/blobServices/read'
2023-04-14 17:43:17 add: Role ffc6bbe0-e443-4c3b-bf54-26581bb2f78e
JSON
api-version=2023-07-01-preview
Condition none