AzRoleAdvertizer

last sync: 2025-May-23 18:27:00 UTC

Kubernetes Runtime Storage Class Contributor Role

Azure BuiltIn RBAC Role definition

Name

Kubernetes Runtime Storage Class Contributor Role

0cd9749a-3aaf-4ae5-8803-bd217705bf3b

Description

Read, write, and delete Kubernetes Runtime storage classes in an Arc connected Kubernetes cluster

Category

None

CreatedOn

2023-12-15 06:02:00 UTC

UpdatedOn

2024-08-19 15:08:52 UTC

Permissions summary

Effective control plane and data plane operations: 50 (unique operations)
•Action: 7
•Delete: 3
•read: 37
•Write: 3

Actions: 7
Resolved control plane operations from Actions: 50
Effective control plane operations: 50
•Action: 7
•Delete: 3
•read: 37
•Write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16510

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3420

Actions

Operation	Description
Microsoft.Authorization/*/read	wildcarded / no description
Microsoft.Insights/alertRules/*	wildcarded / no description
Microsoft.KubernetesRuntime/storageClasses/delete	Delete a StorageClassResource
Microsoft.KubernetesRuntime/storageClasses/read	Get a StorageClassResource
Microsoft.KubernetesRuntime/storageClasses/write	Update a StorageClassResource
Microsoft.Resources/deployments/*	wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/read	Gets or lists resource groups.

NotActions

n/a

DataActions

n/a

NotDataActions

n/a

Used in
BuiltIn Policy

none

History

Date/Time (UTC ymd) (i)	Change	Change detail
2023-12-18 19:01:56	add: Role	0cd9749a-3aaf-4ae5-8803-bd217705bf3b

JSON

api-version=2023-07-01-preview

{9 itemsroleName: "Kubernetes Runtime Storage Class Contributor Role",
type: "BuiltInRole",
description: "Read, write, and delete Kubernetes Runtime storage classes in an Arc connected Kubernetes cluster",
assignableScopes: [1 item"/"
],
permissions: [1 item{4 itemsactions: [7 items"Microsoft.KubernetesRuntime/storageClasses/read",
"Microsoft.KubernetesRuntime/storageClasses/write",
"Microsoft.KubernetesRuntime/storageClasses/delete",
"Microsoft.Authorization/*/read",
"Microsoft.Insights/alertRules/*",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read"
],
notActions: [],
dataActions: [],
notDataActions: []
}
],
createdOn: "2023-12-15T06:02:00.5747685Z",
updatedOn: "2024-08-19T15:08:52.7461468Z",
createdBy: null,
updatedBy: null
}

Condition

none