AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Azure ContainerApps Session Executor

Azure BuiltIn RBAC Role definition

NameAzure ContainerApps Session Executor
Id0fb8eba5-a2bb-4abe-b1c1-49dfad359bb0
DescriptionCreate and execute sessions in a sessionPool
CategoryNone
CreatedOn2024-04-05 18:15:51 UTC
UpdatedOn2025-10-23 22:42:14 UTC
Permissions summary Effective control plane and data plane operations: 50 (unique operations)
•: 1
•action: 9
•delete: 2
•read: 37
•Write: 1

Actions: 6
Resolved control plane operations from Actions: 42
Effective control plane operations: 42
•: 1
•action: 6
•Delete: 1
•read: 33
•Write: 1

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17391

DataActions: 5
Resolved data plane operations: 8
Effective data plane operations: 8
•action: 3
•delete: 1
•read: 4

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4070
Actions
Operation Description
Microsoft.App/sessionPools/*/readwildcarded / no description
Microsoft.App/sessionPools/fetchMcpServerCredentials/actionFetch a Session Pool's MCP Server Credentials
Microsoft.App/sessionPools/rotateMcpServerCredentials/actionRotate a Session Pool's MCP Server Credentials
Microsoft.App/sessionPools/sessions/generatesessions/actionno description given
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
NotActions n/a
DataActions
Operation Description
Microsoft.App/sessionPools/*/readwildcarded / no description
Microsoft.App/sessionPools/executions/*wildcarded / no description
Microsoft.App/sessionPools/files/*wildcarded / no description
Microsoft.App/sessionPools/interpreters/execute/actionno description given
Microsoft.App/sessionPools/interpreters/readno description given
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-10-24 17:22:50 change: Actions Actions: 'add Microsoft.App/sessionPools/fetchMcpServerCredentials/action; add Microsoft.App/sessionPools/rotateMcpServerCredentials/action'
2024-11-01 18:49:42 change: DataActions DataActions: 'add Microsoft.App/sessionPools/executions/*; add Microsoft.App/sessionPools/files/*'
2024-05-20 18:06:19 change: DisplayName, Actions New DisplayName: 'Azure ContainerApps Session Executor'
Old DisplayName: 'Azure ContainerApps Session Creator',
Actions: 'remove Microsoft.Resources/deployments/*; remove Microsoft.Resources/subscriptions/resourceGroups/read'
2024-04-08 17:52:45 add: Role 0fb8eba5-a2bb-4abe-b1c1-49dfad359bb0
JSON
api-version=2023-07-01-preview
Condition none