Id | DisplayName | Description | Details (UTC ymd) (i) |
---|---|---|---|
ca0835dd-bacc-42dd-8ed2-ed5e7230d15b | Object Anchors Account Owner | Provides user with ingestion capabilities for an object anchors account. | 2021-03-02 15:11:43
add Role |
4a167cdf-cb95-4554-9203-2347fe489bd9 | Object Anchors Account Reader | Lets you read ingestion jobs for an object anchors account. | 2021-03-02 15:11:43
add Role |
28241645-39f8-410b-ad48-87863e2951d5 | Security Detonation Chamber Reader | Allowed to query submission info and files from Security Detonation Chamber | 2021-03-01 15:42:30
add Role |
230815da-be43-4aae-9cb4-875f7bd000aa | Cosmos DB Operator | Lets you manage Azure Cosmos DB accounts, but not access data in them. Prevents access to account keys and connection strings. | 2021-02-26 14:41:31
change NotActions |
056cd41c-7e88-42e1-933e-88ba6a50c9c3 | SQL Security Manager | Lets you manage the security-related policies of SQL servers and databases, but not access to them. | 2021-02-15 15:24:20
change Actions |
1e241071-0855-49ea-94dc-649edcd759de | EventGrid Contributor | Lets you manage EventGrid operations. | 2021-02-11 14:23:07
change Actions |
d63b75f7-47ea-4f27-92ac-e0d173aaf093 | Autonomous Development Platform Data Reader (Preview) | Grants read access to Autonomous Development Platform data. | 2021-02-09 14:46:34
change DataActions |
27f8b550-c507-4db9-86f2-f4b8e816d59d | Autonomous Development Platform Data Owner (Preview) | Grants full access to Autonomous Development Platform data. | 2021-02-09 14:46:34
change DataActions |
b8b15564-4fa6-4a59-ab12-03e1d9594795 | Autonomous Development Platform Data Contributor (Preview) | Grants permissions to upload and manage new Autonomous Development Platform measurements. | 2021-02-09 14:46:34
change DataActions |
1e241071-0855-49ea-94dc-649edcd759de | EventGrid Contributor | Lets you manage EventGrid operations. | 2021-02-09 14:46:34
add Role |
7a6f0e70-c033-4fb1-828c-08514e5f4102 | Collaborative Runtime Operator | Can manage resources created by AICS at runtime | 2021-02-08 14:18:19
change Actions |
0e5f05e5-9ab9-446b-b98d-1e2157c94125 | Quota Request Operator Role | Role to read and create Quota Requests and get Quota Request Status. | 2021-02-05 15:19:18
change Actions |
ba92f5b4-2d11-453d-a403-e96b0029c9fe | Storage Blob Data Contributor | Allows for read, write and delete access to Azure Storage blob containers and data | 2021-02-04 14:17:50
change DataActions |
0e5f05e5-9ab9-446b-b98d-1e2157c94125 | Quota Request Operator Role | Role to read and create Quota Requests and get Quota Request Status. | 2021-02-03 15:09:04
add Role |
7f646f1b-fa08-80eb-a33b-edd6ce5c915c | Experimentation Administrator | Experimentation Administrator | 2021-02-03 15:09:04
change DataActions |
6188b7c9-7d01-4f99-a59f-c88b630326c0 | Metric Contributor | Allows for creation, writes and reads to the metric set via the metrics service APIs. | 2021-01-29 15:07:15
change DataActions |
f4c81013-99ee-4d62-a7ee-b3f1f648599a | Azure Sentinel Automation Contributor | Azure Sentinel Automation Contributor | 2021-01-26 16:07:29
change Actions |
a37b566d-3efa-4beb-a2f2-698963fa42ce | Security Detonation Chamber Submission Manager | Allowed to create and manage submissions to Security Detonation Chamber | 2021-01-25 16:07:06
change DataActions |
0b555d9b-b4a7-4f43-b330-627f0e5be8f0 | Security Detonation Chamber Submitter | Allowed to create submissions to Security Detonation Chamber | 2021-01-25 16:07:06
change DataActions |
a1705bd2-3a8f-45a5-8683-466fcfd5cc24 | FHIR Data Converter | Role allows user or principal to convert data from legacy format to FHIR | 2021-01-25 16:07:06
add Role |
f4c81013-99ee-4d62-a7ee-b3f1f648599a | Azure Sentinel Automation Contributor | Azure Sentinel Automation Contributor | 2021-01-25 16:07:06
add Role |
974c5e8b-45b9-4653-ba55-5f855dd0fb88 | Storage Queue Data Contributor | Allows for read, write, and delete access to Azure Storage queues and queue messages | 2021-01-25 16:07:06
change DataActions |
352470b3-6a9c-4686-b503-35deb827e500 | Security Detonation Chamber Publisher | Allowed to publish and modify platforms, workflows and toolsets to Security Detonation Chamber | 2021-01-25 16:07:06
change DataActions |
5432c526-bc82-444a-b7ba-57c5b0b5b34f | CosmosRestoreOperator | Can perform restore action for Cosmos DB database account | 2021-01-22 09:15:20
add Role |
ae349356-3a1b-4a5e-921d-050484c6347e | Application Insights Component Contributor | Can manage Application Insights components | 2021-01-20 16:06:17
change Actions |
7a6f0e70-c033-4fb1-828c-08514e5f4102 | Collaborative Runtime Operator | Can manage resources created by AICS at runtime | 2021-01-19 16:07:23
add Role |
00c29273-979b-4161-815c-10b084fb9324 | Backup Operator | Lets you manage backup services, except removal of backup, vault creation and giving access to others | 2021-01-19 16:07:23
change Actions |
352470b3-6a9c-4686-b503-35deb827e500 | Security Detonation Chamber Publisher | Allowed to publish and modify platforms, workflows and toolsets to Security Detonation Chamber | 2021-01-18 16:05:49
add Role |
7f646f1b-fa08-80eb-a22b-edd6ce5c915c | Experimentation Contributor | Experimentation Contributor | 2021-01-18 16:05:49
change Actions |
a37b566d-3efa-4beb-a2f2-698963fa42ce | Security Detonation Chamber Submission Manager | Allowed to create and manage submissions to Security Detonation Chamber | 2021-01-18 16:05:49
add Role |
7f646f1b-fa08-80eb-a33b-edd6ce5c915c | Experimentation Administrator | Experimentation Administrator | 2021-01-18 16:05:49
change Actions |
49632ef5-d9ac-41f4-b8e7-bbe587fa74a1 | Experimentation Reader | Experimentation Reader | 2021-01-12 16:06:58
change Actions |
5548b2cf-c94c-4228-90ba-30851930a12f | Microsoft.Kubernetes connected cluster role | Microsoft.Kubernetes connected cluster role. | 2021-01-08 16:05:47
add Role |
7efff54f-a5b4-42b5-a1c5-5411624893ce | Disk Snapshot Contributor | Provides permission to backup vault to manage disk snapshots. | 2021-01-06 16:06:44
change Actions |
b8b15564-4fa6-4a59-ab12-03e1d9594795 | Autonomous Development Platform Data Contributor (Preview) | Grants permissions to upload and manage new Autonomous Development Platform measurements. | 2021-01-05 16:06:49
change Description, DataActions, NotDataActions |
39bc4728-0917-49c7-9d2c-d95423bc2eb4 | Security Reader | Security Reader Role | 2021-01-04 16:05:39
change Actions |
3e5e47e6-65f7-47ef-90b5-e5dd4d455f24 | Disk Backup Reader | Provides permission to backup vault to perform disk backup. | 2020-12-18 16:05:51
change Actions |
e147488a-f6f5-4113-8e2d-b22465e65bf6 | Key Vault Crypto Service Encryption User (preview) | Read metadata of keys and perform wrap/unwrap operations. Only works for key vaults that use the 'Azure role-based access control' permission model. | 2020-12-18 16:05:51
change DisplayName, Actions |
b50d9833-a0cb-478e-945f-707fcc997c13 | Disk Restore Operator | Provides permission to backup vault to perform disk restore. | 2020-12-18 16:05:51
change Actions |
7efff54f-a5b4-42b5-a1c5-5411624893ce | Disk Snapshot Contributor | Provides permission to backup vault to manage disk snapshots. | 2020-12-18 16:05:51
change Actions |
27f8b550-c507-4db9-86f2-f4b8e816d59d | Autonomous Development Platform Data Owner (Preview) | Grants full access to Autonomous Development Platform data. | 2020-12-15 16:36:19
add Role |
7efff54f-a5b4-42b5-a1c5-5411624893ce | Disk Snapshot Contributor | Provides permission to backup vault to manage disk snapshots. | 2020-12-15 16:36:19
add Role |
b8b15564-4fa6-4a59-ab12-03e1d9594795 | Autonomous Development Platform Data Contributor (Preview) | Grants permissions to manage Autonomous Development Platform data entities, but does not allow accessing the underlying data. Note that entity deletion is not permitted by this role. | 2020-12-15 16:36:19
add Role |
b50d9833-a0cb-478e-945f-707fcc997c13 | Disk Restore Operator | Provides permission to backup vault to perform disk restore. | 2020-12-15 16:36:19
add Role |
3e5e47e6-65f7-47ef-90b5-e5dd4d455f24 | Disk Backup Reader | Provides permission to backup vault to perform disk backup. | 2020-12-15 16:36:19
add Role |
d63b75f7-47ea-4f27-92ac-e0d173aaf093 | Autonomous Development Platform Data Reader (Preview) | Grants read access to Autonomous Development Platform data. | 2020-12-15 16:36:19
add Role |
ceadfde2-b300-400a-ab7b-6143895aa822 | Desktop Virtualization Host Pool Reader | Reader of the Desktop Virtualization Host Pool. | 2020-12-14 15:13:28
add Role |
49a72310-ab8d-41df-bbb0-79b649203868 | Desktop Virtualization Reader | Reader of Desktop Virtualization. | 2020-12-14 15:13:28
add Role |
ea4bfff8-7fb4-485a-aadd-d4129a0ffaa6 | Desktop Virtualization User Session Operator | Operator of the Desktop Virtualization Uesr Session. | 2020-12-14 15:13:28
add Role |
86240b0e-9422-4c43-887b-b61143f32ba8 | Desktop Virtualization Application Group Contributor | Contributor of the Desktop Virtualization Application Group. | 2020-12-14 15:13:28
add Role |
21efdde3-836f-432b-bf3d-3e8e734d4b2b | Desktop Virtualization Workspace Contributor | Contributor of the Desktop Virtualization Workspace. | 2020-12-14 15:13:28
add Role |
c7aa55d3-1abb-444a-a5ca-5e51e485d6ec | Integration Service Environment Developer | Allows developers to create and update workflows, integration accounts and API connections in integration service environments. | 2020-12-14 15:13:28
change Actions |
e307426c-f9b6-4e81-87de-d99efb3c32bc | Desktop Virtualization Host Pool Contributor | Contributor of the Desktop Virtualization Host Pool. | 2020-12-14 15:13:28
add Role |
aebf23d0-b568-4e86-b8f9-fe83a2c6ab55 | Desktop Virtualization Application Group Reader | Reader of the Desktop Virtualization Application Group. | 2020-12-14 15:13:28
add Role |
2ad6aaab-ead9-4eaa-8ac5-da422f562408 | Desktop Virtualization Session Host Operator | Operator of the Desktop Virtualization Session Host. | 2020-12-14 15:13:28
add Role |
0fa44ee9-7a7d-466b-9bb2-2bf446b1204d | Desktop Virtualization Workspace Reader | Reader of the Desktop Virtualization Workspace. | 2020-12-14 15:13:28
add Role |
082f0a83-3be5-4ba1-904c-961cca79b387 | Desktop Virtualization Contributor | Contributor of Desktop Virtualization. | 2020-12-14 15:13:28
add Role |
056cd41c-7e88-42e1-933e-88ba6a50c9c3 | SQL Security Manager | Lets you manage the security-related policies of SQL servers and databases, but not access to them. | 2020-12-10 15:11:36
change Actions |
3e150937-b8fe-4cfb-8069-0eaf05ecd056 | Azure Sentinel Responder | Azure Sentinel Responder | 2020-12-08 15:44:03
change Actions |
434105ed-43f6-45c7-a02f-909b2ba83430 | Cost Management Contributor | Can view costs and manage cost configuration (e.g. budgets, exports) | 2020-12-08 15:44:03
change Actions |
72fafb9e-0641-4937-9268-a91bfd8191a3 | Cost Management Reader | Can view cost data and configuration (e.g. budgets, exports) | 2020-12-08 15:44:03
change Actions |
ca6382a4-1721-4bcf-a114-ff0c70227b6b | Application Group Contributor | Contributor of the Application Group. | 2020-12-07 15:13:35
change Actions |
ca6382a4-1721-4bcf-a114-ff0c70227b6b | Application Group Contributor | Contributor of the Application Group. | 2020-12-04 15:12:58
add Role |
dd920d6d-f481-47f1-b461-f338c46b2d9f | Marketplace Admin | Administrator of marketplace resource provider | 2020-11-28 17:50:16
remove Role |
6188b7c9-7d01-4f99-a59f-c88b630326c0 | Metric Contributor | Allows for creation, writes and reads to the metric set via the metrics service APIs. | 2020-11-24 15:34:53
change DataActions |
9ef4ef9c-a049-46b0-82ab-dd8ac094c889 | Project Babylon Data Curator | The Microsoft.ProjectBabylon data curator can create, read, modify and delete catalog data objects and establish relationships between objects. This role is in preview and subject to change. | 2020-11-23 14:37:57
change DisplayName, Description, Actions |
c8d896ba-346d-4f50-bc1d-7d1c84130446 | Project Babylon Data Reader | The Microsoft.ProjectBabylon data reader can read catalog data objects. This role is in preview and subject to change. | 2020-11-23 14:37:57
change DisplayName, Description, Actions |
05b7651b-dc44-475e-b74d-df3db49fae0f | Project Babylon Data Source Administrator | The Microsoft.ProjectBabylon data source administrator can manage data sources and data scans. This role is in preview and subject to change. | 2020-11-23 14:37:57
change DisplayName, Description, Actions |
e5e2a7ff-d759-4cd2-bb51-3152d37e2eb1 | Storage Account Backup Contributor Role | Storage Account Backup Contributors are allowed to perform backup and restore of Storage Account. | 2020-11-19 14:28:56
change Actions |
8a3c2885-9b38-4fd2-9d99-91af537c1347 | Purview Data Curator Role Preview | The Microsoft.Purview data curator can create, read, modify and delete catalog data objects and establish relationships between objects | 2020-11-19 14:28:56
change Actions |
200bba9e-f0c8-430f-892b-6f0794863803 | Purview Data Source Administrator Role Preview | The Microsoft.Purview data source administrator can manage data sources and data scans | 2020-11-19 14:28:56
change Actions |
ff100721-1b9d-43d8-af52-42b69c1272db | Purview Data Reader Role Preview | The Microsoft.Purview data reader can read catalog data objects | 2020-11-19 14:28:56
change Actions |
f2f79976-90be-4501-89c6-7caf12474683 | Azure Data Cloud Lifter Management | Grants full access to manage all resources in managed Resource Group. | 2020-11-18 18:53:03
remove Role |
6188b7c9-7d01-4f99-a59f-c88b630326c0 | Metric Contributor | Allows for creation, writes and reads to the metric set via the metrics service APIs. | 2020-11-18 18:53:03
change DisplayName, DataActions |
749f88d5-cbae-40b8-bcfc-e573ddc772fa | Monitoring Contributor | Can read all monitoring data and update monitoring settings. | 2020-11-18 18:53:03
change Actions |
ff100721-1b9d-43d8-af52-42b69c1272db | Purview Data Reader Role Preview | The Microsoft.Purview data reader can read catalog data objects | 2020-11-16 13:39:23
add Role |
c8d896ba-346d-4f50-bc1d-7d1c84130446 | Project Babylon Data Reader Role Preview | The Microsoft.ProjectBabylon data reader can read catalog data objects | 2020-11-16 13:39:23
add Role |
05b7651b-dc44-475e-b74d-df3db49fae0f | Project Babylon Data Source Administrator Role Preview | The Microsoft.ProjectBabylon data source administrator can manage data sources and data scans | 2020-11-16 13:39:23
add Role |
e5e2a7ff-d759-4cd2-bb51-3152d37e2eb1 | Storage Account Backup Contributor Role | Storage Account Backup Contributors are allowed to perform backup and restore of Storage Account. | 2020-11-16 13:39:23
change Actions |
9ef4ef9c-a049-46b0-82ab-dd8ac094c889 | Project Babylon Data Curator Role Preview | The Microsoft.ProjectBabylon data curator can create, read, modify and delete catalog data objects and establish relationships between objects | 2020-11-16 13:39:23
add Role |
8a3c2885-9b38-4fd2-9d99-91af537c1347 | Purview Data Curator Role Preview | The Microsoft.Purview data curator can create, read, modify and delete catalog data objects and establish relationships between objects | 2020-11-16 13:39:23
add Role |
200bba9e-f0c8-430f-892b-6f0794863803 | Purview Data Source Administrator Role Preview | The Microsoft.Purview data source administrator can manage data sources and data scans | 2020-11-16 13:39:23
add Role |
e5e2a7ff-d759-4cd2-bb51-3152d37e2eb1 | Storage Account Backup Contributor Role | Storage Account Backup Contributors are allowed to perform backup and restore of Storage Account. | 2020-11-13 14:22:44
add Role |
6188b7c9-7d01-4f99-a59f-c88b630326c0 | Metric Contributor Service Role | Allows for creation, writes and reads to the metric set via the metrics service APIs. | 2020-11-12 14:32:48
add Role |
b24988ac-6180-42a0-ab88-20f7382dd24c | Contributor | Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC. | 2020-11-11 15:02:47
change NotActions |
3e150937-b8fe-4cfb-8069-0eaf05ecd056 | Azure Sentinel Responder | Azure Sentinel Responder | 2020-11-09 14:42:02
change NotActions |
3e150937-b8fe-4cfb-8069-0eaf05ecd056 | Azure Sentinel Responder | Azure Sentinel Responder | 2020-11-04 15:39:11
change Actions |
ab8e14d6-4a74-4a29-9ba8-549422addade | Azure Sentinel Contributor | Azure Sentinel Contributor | 2020-11-04 15:39:11
change Actions |
8d289c81-5878-46d4-8554-54e1e3d8b5cb | Azure Sentinel Reader | Azure Sentinel Reader | 2020-11-04 15:39:11
change Actions |
dffb1e0c-446f-4dde-a09f-99eb5cc68b96 | Azure Arc Kubernetes Admin | Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces. | 2020-11-03 14:38:31
change DataActions, NotDataActions |
63f0a09d-1495-4db4-a681-037d84835eb4 | Azure Arc Kubernetes Viewer | Lets you view all resources in cluster/namespace, except secrets. | 2020-11-03 14:38:31
change DataActions, NotDataActions |
5b999177-9696-4545-85c7-50de3797e5a1 | Azure Arc Kubernetes Writer | Lets you update everything in cluster/namespace, except (cluster)roles and (cluster)role bindings. | 2020-11-03 14:38:31
change DataActions, NotDataActions |
635dd51f-9968-44d3-b7fb-6d9a6bd613ae | AzureML Metrics Writer (preview) | Lets you write metrics to AzureML workspace | 2020-10-29 15:20:50
add Role |
f2f79976-90be-4501-89c6-7caf12474683 | Azure Data Cloud Lifter Management | Grants full access to manage all resources in managed Resource Group. | 2020-10-28 15:04:35
change Actions |
8508508a-4469-4e45-963b-2518ee0bb728 | AgFood Platform Service Contributor | Provides contribute access to AgFood Platform Service | 2020-10-27 14:13:08
change NotDataActions |
f7b75c60-3036-4b75-91c3-6b41c27c1689 | Reservation Purchaser | Lets you purchase reservations | 2020-10-26 14:19:04
add Role |
a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb | Azure Kubernetes Service RBAC Writer | Allows read/write access to most objects in a namespace.This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets and running Pods as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace. Applying this role at cluster scope will give access across all namespaces. | 2020-10-23 13:31:33
change Description, Actions, DataActions, NotDataActions |
7e4f1700-ea5a-4f59-8f37-079cfe29dce3 | SignalR Service Owner (Preview) | Full access to Azure SignalR Service REST APIs | 2020-10-23 13:31:33
change DataActions |
420fcaa2-552c-430f-98ca-3264be4806c7 | SignalR App Server (Preview) | Lets your app server access SignalR Service with AAD auth options. | 2020-10-23 13:31:33
change DataActions |
7f6c6a51-bcf8-42ba-9220-52d62157d7db | Azure Kubernetes Service RBAC Reader | Allows read-only access to see most objects in a namespace. It does not allow viewing roles or role bindings. This role does not allow viewing Secrets, since reading the contents of Secrets enables access to ServiceAccount credentials in the namespace, which would allow API access as any ServiceAccount in the namespace (a form of privilege escalation). Applying this role at cluster scope will give access across all namespaces. | 2020-10-23 13:31:33
change Description, Actions, DataActions, NotDataActions |
fd53cd77-2268-407a-8f46-7e7863d0f521 | SignalR Serverless Contributor (Preview) | Lets your app access service in serverless mode with AAD auth options. | 2020-10-23 13:31:33
change Description, DataActions |
f2f79976-90be-4501-89c6-7caf12474683 | Azure Data Cloud Lifter Management | Grants full access to manage all resources in managed Resource Group. | 2020-10-20 13:29:34
add Role |
056cd41c-7e88-42e1-933e-88ba6a50c9c3 | SQL Security Manager | Lets you manage the security-related policies of SQL servers and databases, but not access to them. | 2020-10-20 13:29:34
change Actions |
9b7fa17d-e63e-47b0-bb0a-15c516ac86ec | SQL DB Contributor | Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers. | 2020-10-20 13:29:34
change NotActions |
6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437 | SQL Server Contributor | Lets you manage SQL servers and databases, but not access to them, and not their security -related policies. | 2020-10-20 13:29:34
change NotActions |
0b555d9b-b4a7-4f43-b330-627f0e5be8f0 | Security Detonation Chamber Submitter | Allowed to create submissions to Security Detonation Chamber | 2020-10-19 15:27:07
add Role |
ddde6b66-c0df-4114-a159-3618637b3035 | SignalR Service Reader (Preview) | Read-only access to Azure SignalR Service REST APIs | 2020-10-13 13:23:37
add Role |
7e4f1700-ea5a-4f59-8f37-079cfe29dce3 | SignalR Service Owner (Preview) | Full access to Azure SignalR Service REST APIs | 2020-10-13 13:23:37
add Role |
82200a5b-e217-47a5-b665-6d8765ee745b | Services Hub Operator | Services Hub Operator allows you to perform all read, write, and deletion operations related to Services Hub Connectors. | 2020-10-07 08:52:18
change Actions |
4fe6d683-8411-4247-8525-b6b5b8a80669 | Microsoft.ScVmm service role | Microsoft.ScVmm service role. | 2020-09-23 13:42:44
remove Role |
18500a29-7fe2-46b2-a342-b16a415e101d | Managed HSM contributor | Lets you manage managed HSM pools, but not access to them. | 2020-09-17 14:31:34
add Role |
2c56ea50-c6b3-40a6-83c0-9d98858bc7d2 | Schema Registry Reader (Preview) | Read and list Schema Registry groups and schemas. | 2020-09-14 13:55:19
add Role |
5dffeca3-4936-4216-b2bc-10343a5abb25 | Schema Registry Contributor (Preview) | Read, write, and delete Schema Registry groups and schemas. | 2020-09-14 13:55:19
add Role |
4fe6d683-8411-4247-8525-b6b5b8a80669 | Microsoft.ScVmm service role | Microsoft.ScVmm service role. | 2020-09-14 13:55:19
add Role |
f8da80de-1ff9-4747-ad80-a19b7f6079e3 | AgFood Platform Service Admin | Provides admin access to AgFood Platform Service | 2020-09-14 13:55:19
add Role |
8508508a-4469-4e45-963b-2518ee0bb728 | AgFood Platform Service Contributor | Provides contribute access to AgFood Platform Service | 2020-09-14 13:55:19
add Role |
7ec7ccdc-f61e-41fe-9aaf-980df0a44eba | AgFood Platform Service Reader | Provides read access to AgFood Platform Service | 2020-09-14 13:55:19
add Role |
3b20f47b-3825-43cb-8114-4bd2201156a8 | Cognitive Services Metrics Advisor User | Access to the project. | 2020-09-10 14:55:48
add Role |
cb43c632-a144-4ec5-977c-e80c4affc34a | Cognitive Services Metrics Advisor Administrator | Full access to the project, including the system level configuration. | 2020-09-10 14:55:48
add Role |
e9dba6fb-3d52-4cf0-bce3-f06ce71b9e0f | Device Update Reader | Gives you read access to management and content operations, but does not allow making changes | 2020-08-23 16:02:03
add Role |
e4237640-0e3d-4a46-8fda-70bc94856432 | Device Update Deployments Administrator | Gives you full access to management operations | 2020-08-23 16:02:03
add Role |
0378884a-3af5-44ab-8323-f5b22f9f3c98 | Device Update Content Administrator | Gives you full access to content operations | 2020-08-23 16:02:03
add Role |
02ca0879-e8e4-47a5-a61e-5c618b76e64a | Device Update Administrator | Gives you full access to management and content operations | 2020-08-23 16:02:03
add Role |
d1ee9a80-8b14-47f0-bdc2-f4a351625a7b | Device Update Content Reader | Gives you read access to content operations, but does not allow making changes | 2020-08-23 16:02:03
add Role |
49e2f5d2-7741-4835-8efa-19e1fe35e47f | Device Update Deployments Reader | Gives you read access to management operations, but does not allow making changes | 2020-08-23 16:02:03
add Role |
daa9e50b-21df-454c-94a6-a8050adab352 | Collaborative Data Contributor | Can manage data packages of a collaborative. | 2020-08-14 14:27:30
add Role |
420fcaa2-552c-430f-98ca-3264be4806c7 | SignalR App Server (Preview) | Lets your app server access SignalR Service with AAD Auth options. | 2020-07-29 13:49:09
add Role |
fd53cd77-2268-407a-8f46-7e7863d0f521 | SignalR Serverless Contributor (Preview) | Lets your app access service in serverless mode. | 2020-07-29 13:49:09
add Role |
00493d72-78f6-4148-b6c5-d3ce8e4799dd | Azure Arc Enabled Kubernetes Cluster User Role | List cluster user credentials action. | 2020-07-29 13:49:09
add Role |
d18777c0-1514-4662-8490-608db7d334b6 | Object Understanding Account Reader | Lets you read ingestion jobs for an object understanding account. | 2020-07-24 14:41:55
add Role |
82200a5b-e217-47a5-b665-6d8765ee745b | Services Hub Operator | Services Hub Operator allows you to perform all read, write, and deletion operations related to Services Hub Connectors. | 2020-07-21 19:48:17
add Role |
a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb | Azure Kubernetes Service RBAC Writer | Lets you update everything in cluster/namespace, except resource quotas, namespaces, pod security policies, certificate signing requests, (cluster)roles and (cluster)role bindings. | 2020-07-03 14:58:03
add Role |
b1ff04bb-8a4e-4dc4-8eb5-8693973ce19b | Azure Kubernetes Service RBAC Cluster Admin | Lets you manage all resources in the cluster. | 2020-07-03 14:58:03
add Role |
3498e952-d568-435e-9b2c-8d77e338d7f7 | Azure Kubernetes Service RBAC Admin | Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces. | 2020-07-03 14:58:03
add Role |
7f6c6a51-bcf8-42ba-9220-52d62157d7db | Azure Kubernetes Service RBAC Reader | Lets you view all resources in cluster/namespace, except secrets. | 2020-07-03 14:58:03
add Role |
63f0a09d-1495-4db4-a681-037d84835eb4 | Azure Arc Kubernetes Viewer | Lets you view all resources in cluster/namespace, except secrets. | 2020-06-15 15:35:59
add Role |
dffb1e0c-446f-4dde-a09f-99eb5cc68b96 | Azure Arc Kubernetes Admin | Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces. | 2020-06-15 15:35:59
add Role |
8393591c-06b9-48a2-a542-1bd6b377f6a2 | Azure Arc Kubernetes Cluster Admin | Lets you manage all resources in the cluster. | 2020-06-15 15:35:59
add Role |
5b999177-9696-4545-85c7-50de3797e5a1 | Azure Arc Kubernetes Writer | Lets you update everything in cluster/namespace, except (cluster)roles and (cluster)role bindings. | 2020-06-15 15:35:59
add Role |
e147488a-f6f5-4113-8e2d-b22465e65bf6 | Key Vault Crypto Service Encryption (preview) | Can read metadata of keys and perform wrap/unwrap operations. | 2020-05-21 16:07:05
add Role |
14b46e9e-c2b7-41b4-b07b-48a6ebf60603 | Key Vault Crypto Officer (preview) | Can perform any action on the keys of a key vault, except manage permissions. | 2020-05-19 20:42:36
add Role |
4633458b-17de-408a-b874-0445c86b69e6 | Key Vault Secrets User (preview) | Can read secret contents. | 2020-05-19 20:42:36
add Role |
12338af0-0e69-4776-bea7-57ae8d297424 | Key Vault Crypto User (preview) | Can perform cryptographic operations on keys and certificates. | 2020-05-19 20:42:36
add Role |
b86a8fe4-44ce-4948-aee5-eccb2c155cd7 | Key Vault Secrets Officer (preview) | Can perform any action on the secrets of a key vault, except manage permissions. | 2020-05-19 20:42:36
add Role |
00482a5a-887f-4fb3-b363-3b7fe8e74483 | Key Vault Administrator (preview) | Can perform any action on certificates, keys and secrets of a key vault, except manage permissions. | 2020-05-19 20:42:36
add Role |
a4417e6f-fecd-4de8-b567-7b0420556985 | Key Vault Certificates Officer (preview) | Can perform any action on the certificates of a key vault, except manage permissions. | 2020-05-19 20:42:36
add Role |
21090545-7ca7-4776-b22c-e363652d74d2 | Key Vault Reader (preview) | Can read metadata of key vaults and its certificates, keys and secrets. Cannot read sensitive values such as secret contents or key material. | 2020-05-19 20:42:36
add Role |
c1ff6cc2-c111-46fe-8896-e0ef812ad9f3 | Cognitive Services Custom Vision Contributor | Full access to the project, including the ability to view, create, edit, or delete projects. | 2020-05-09 14:57:51
add Role |
5c4089e1-6d96-4d2f-b296-c1bc7137275f | Cognitive Services Custom Vision Deployment | Publish, unpublish or export models. Deployment can view the project but can't update. | 2020-05-09 14:57:51
add Role |
88424f51-ebe7-446f-bc41-7fa16989e96c | Cognitive Services Custom Vision Labeler | View, edit training images and create, add, remove, or delete the image tags. Labelers can view the project but can't update anything other than training images and tags. | 2020-05-09 14:57:51
add Role |
0a5ae4ab-0d65-4eeb-be61-29fc9b54394b | Cognitive Services Custom Vision Trainer | View, edit projects and train the models, including the ability to publish, unpublish, export the models. Trainers can't create or delete the project. | 2020-05-09 14:57:51
add Role |
93586559-c37d-4a6b-ba08-b9f0940c2d73 | Cognitive Services Custom Vision Reader | Read-only actions in the project. Readers can't create or update the project. | 2020-05-09 14:57:51
add Role |
8f5e0ce6-4f7b-4dcf-bddf-e6f48634a204 | Azure Maps Data Contributor | Grants access to read, write, and delete access to map related data from an Azure maps account. | 2020-05-08 05:22:07
add Role |
f4cc2bf9-21be-47a1-bdf1-5c5804381025 | Cognitive Services QnA Maker Editor | Let's you create, edit, import and export a KB. You cannot publish or delete a KB. | 2020-05-04 15:11:45
change DisplayName |
466ccd10-b268-4a11-b098-b4849f024126 | Cognitive Services QnA Maker Reader | Let's you read and test a KB only. | 2020-05-04 15:11:45
change DisplayName |
423170ca-a8f6-4b0f-8487-9e4eb8f49bfa | Azure Maps Data Reader | Grants access to read map related data from an Azure maps account. | 2020-04-29 16:42:26
change DisplayName |
aefefa01-2a29-4197-83a8-2828f33ce315 | Tenant registration role | Service role used by RP's for tenant level registration | 2020-04-24 19:20:22
remove Role |
aefefa01-2a29-4197-83a8-2828f33ce315 | Tenant registration role | Service role used by RP's for tenant level registration | 2020-04-23 15:06:19
add Role |
49632ef5-d9ac-41f4-b8e7-bbe587fa74a1 | Experimentation Reader | Experimentation Reader | 2020-04-23 15:06:19
change DisplayName |
70ea1423-466c-4e7b-a2ee-f1206ef2072d | Experiment Contributor | Experiment Contributor | 2020-04-23 15:06:19
remove Role |
ed4b1625-bac7-4b49-8578-127fc3440d25 | Experiment Administrator | Experiment Administrator | 2020-04-23 15:06:19
remove Role |
4dd61c23-6743-42fe-a388-d8bdd41cb745 | Object Understanding Account Owner | Provides user with ingestion capabilities for Azure Object Understanding. | 2020-04-23 15:06:19
add Role |
49632ef5-d9ac-41f4-b8e7-bbe587fa74a1 | Experiment Operator | Experiment Operator | 2020-03-28 01:22:25
change DisplayName |
b879ac78-f1e6-448d-ab4c-5908cd5967c1 | VSOnline Virtual Network Service Role | This role will have access to customer's virtual networks, nics, and public ips. It used by VSOnline to deploy VMs into customer's virtual network | 2020-03-28 01:22:25
remove Role |
49632ef5-d9ac-41f4-b8e7-bbe587fa74a1 | Experimentation Operator | Experiment Operator | 2020-03-26 18:26:05
add Role |
70ea1423-466c-4e7b-a2ee-f1206ef2072d | Experiment Contributor | Experiment Contributor | 2020-03-26 18:26:05
add Role |
ed4b1625-bac7-4b49-8578-127fc3440d25 | Experiment Administrator | Experiment Administrator | 2020-03-26 18:26:05
add Role |
5a1fc7df-4bf1-4951-a576-89034ee01acd | FHIR Data Contributor | Role allows user or principal full access to FHIR Data | 2020-03-18 07:39:13
add Role |
3f88fce4-5892-4214-ae73-ba5294559913 | FHIR Data Writer | Role allows user or principal to read and write FHIR Data | 2020-03-18 07:39:13
add Role |
3db33094-8700-4567-8da5-1501d4e7e843 | FHIR Data Exporter | Role allows user or principal to read FHIR Data | 2020-03-18 07:39:13
add Role |
4c8d0bbc-75d3-4935-991f-5f3c56d81508 | FHIR Data Reader | Role allows user or principal to read FHIR Data | 2020-03-18 07:39:13
add Role |
350f8d15-c687-4448-8ae1-157740a3936d | Hierarchy Settings Administrator | Allows users to edit and delete Hierarchy Settings | 2020-03-14 15:10:08
add Role |
b879ac78-f1e6-448d-ab4c-5908cd5967c1 | VSOnline Virtual Network Service Role | This role will have access to customer's virtual networks, nics, and public ips. It used by VSOnline to deploy VMs into customer's virtual network | 2020-03-14 15:10:08
add Role |
bcd981a7-7f74-457b-83e1-cceb9e632ffe | Azure Digital Twins Owner (Preview) | Full access role for Digital Twins data-plane | 2020-03-11 05:47:56
add Role |
d57506d4-4c8d-48b1-8587-93c323f6a5a3 | Azure Digital Twins Reader (Preview) | Read-only role for Digital Twins data-plane properties | 2020-03-11 05:47:56
add Role |
ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8 | Azure Kubernetes Service Contributor Role | Grants access to read and write Azure Kubernetes Service clusters | 2020-02-28 09:58:27
add Role |
dd920d6d-f481-47f1-b461-f338c46b2d9f | Marketplace Admin | Administrator of marketplace resource provider | 2020-02-27 09:26:20
add Role |
c7aa55d3-1abb-444a-a5ca-5e51e485d6ec | Integration Service Environment Developer | Allows developers to create and update workflows, integration accounts and API connections in integration service environments. | 2020-02-21 00:11:51
add Role |
a41e2c5b-bd99-4a07-88f4-9bf657a760b8 | Integration Service Environment Contributor | Lets you manage integration service environments, but not access to them. | 2020-02-21 00:11:51
add Role |
4a9ae827-6dc8-4573-8ac7-8239d42aa03f | Tag Contributor | Lets you manage tags on entities, without providing access to the entities themselves. | 2020-02-19 09:00:33
add Role |
612c2aa1-cb24-443b-ac28-3ab7272de6f5 | Security Assessment Contributor | Lets you push assessments to Security Center | 2020-02-13 13:58:05
add Role |
34e09817-6cbe-4d01-b1a2-e0eac5743d41 | Kubernetes Cluster - Azure Arc Onboarding | Role definition to authorize any user/service to create connectedClusters resource | 2020-02-11 08:11:18
change DisplayName |
641177b8-a67a-45b9-a033-47bc880bb21e | Managed Application Contributor Role | Allows for creating managed application resources. | 2020-02-08 03:50:49
add Role |
0b072326-6884-49b7-a53d-ae6aa62260ff | MLC Service Role | This role defines permissions for control plane actions by the Machine Learning Compute (MLC) service. | 2020-01-30 21:07:35
remove Role |
d39065c4-c120-43c9-ab0a-63eed9795f0a | Remote Rendering Client | Provides user with manage session, rendering and diagnostics capabilities for Azure Remote Rendering. | 2020-01-24 05:21:10
add Role |
3df8b902-2a6f-47c7-8cc5-360e9b272a7e | Remote Rendering Administrator | Provides user with conversion, manage session, rendering and diagnostics capabilities for Azure Remote Rendering | 2020-01-24 05:21:10
add Role |
7f646f1b-fa08-80eb-a33b-edd6ce5c915c | Experimentation Administrator | Experimentation Administrator | 2019-12-19 07:49:46
add Role |
466ccd10-b268-4a11-b098-b4849f024126 | QnA Maker Reader | 2019-12-18 15:43:34
add Role |
|
f4cc2bf9-21be-47a1-bdf1-5c5804381025 | QnA Maker Editor | 2019-12-18 15:43:34
add Role |
|
7f646f1b-fa08-80eb-a22b-edd6ce5c915c | Experimentation Contributor | Experimentation Contributor | 2019-12-17 15:43:46
add Role |
34e09817-6cbe-4d01-b1a2-e0eac5743d41 | Kubernetes Cluster - Azure Arc Onborading | Role definition to authorize any user/service to create connectedClusters resource | 2019-12-13 11:23:49
change DisplayName |
0b072326-6884-49b7-a53d-ae6aa62260ff | MLC Service Role | This role defines permissions for control plane actions by the Machine Learning Compute (MLC) service. | 2019-11-26 15:41:35
add Role |
36243c78-bf99-498c-9df9-86d9f8d28608 | Resource Policy Contributor | Users with rights to create/modify resource policy, create support ticket and read resources/hierarchy. | 2019-11-20 21:32:41
change DisplayName |
516239f1-63e1-4d78-a4de-a74fb236a071 | App Configuration Data Reader | Allows read access to App Configuration data. | 2019-10-26 02:15:31
add Role |
5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b | App Configuration Data Owner | Allows full access to App Configuration data. | 2019-10-26 02:15:31
add Role |
7f646f1b-fa07-40eb-a22b-edd6ce5c915c | Altretya test Service Role | Altretya test | 2019-10-24 02:15:32
remove Role |
b64e21ea-ac4e-4cdf-9dc9-5b892992bee7 | Azure Connected Machine Onboarding | Can onboard Azure Connected Machines. | 2019-10-24 02:15:32
add Role |
cd570a14-e51a-42ad-bac8-bafd67325302 | Azure Connected Machine Resource Administrator | Can read, write, delete and re-onboard Azure Connected Machines. | 2019-10-24 02:15:32
add Role |
91c1777a-f3dc-4fae-b103-61d183457e46 | Managed Services Registration assignment Delete Role | Managed Services Registration Assignment Delete Role allows the managing tenant users to delete the registration assignment assigned to their tenant. | 2019-10-24 02:15:32
add Role |
7f646f1b-fa07-40eb-a22b-edd6ce5c915c | Altretya test Service Role | Altretya test | 2019-10-07 13:33:12
add Role |