AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Azure Kubernetes Fleet Manager RBAC Cluster Writer

Azure BuiltIn RBAC Role definition

NameAzure Kubernetes Fleet Manager RBAC Cluster Writer
Id1dc4cd5a-de51-4ee4-bc8e-b40e9c17e320
DescriptionGrants read/write access to most Kubernetes cluster-scoped resources in the fleet-managed hub cluster.
CategoryNone
CreatedOn2024-10-21 15:04:48 UTC
UpdatedOn2024-10-21 15:04:48 UTC
Permissions summary Effective control plane and data plane operations: 63 (unique operations)
•action: 1
•read: 37
•write: 25

Actions: 2
Resolved control plane operations from Actions: 2
Effective control plane operations: 2
•action: 1
•read: 1

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17431

DataActions: 61
Resolved data plane operations: 61
Effective data plane operations: 61
•read: 36
•write: 25

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4017
Actions
Operation Description
Microsoft.ContainerService/fleets/listCredentials/actionList fleet credentials
Microsoft.ContainerService/fleets/readGet fleet
NotActions n/a
DataActions
Operation Description
Microsoft.ContainerService/fleets/apiextensions.k8s.io/customresourcedefinitions/readReads customresourcedefinitions
Microsoft.ContainerService/fleets/apps/controllerrevisions/readReads controllerrevisions
Microsoft.ContainerService/fleets/apps/daemonsets/readReads daemonsets
Microsoft.ContainerService/fleets/apps/daemonsets/writeWrites daemonsets
Microsoft.ContainerService/fleets/apps/deployments/readReads deployments
Microsoft.ContainerService/fleets/apps/deployments/writeWrites deployments
Microsoft.ContainerService/fleets/apps/statefulsets/readReads statefulsets
Microsoft.ContainerService/fleets/apps/statefulsets/writeWrites statefulsets
Microsoft.ContainerService/fleets/autoscaling/horizontalpodautoscalers/readReads horizontalpodautoscalers
Microsoft.ContainerService/fleets/autoscaling/horizontalpodautoscalers/writeWrites horizontalpodautoscalers
Microsoft.ContainerService/fleets/batch/cronjobs/readReads cronjobs
Microsoft.ContainerService/fleets/batch/cronjobs/writeWrites cronjobs
Microsoft.ContainerService/fleets/batch/jobs/readReads jobs
Microsoft.ContainerService/fleets/batch/jobs/writeWrites jobs
Microsoft.ContainerService/fleets/cluster.kubernetes-fleet.io/memberclusters/readRead fleet membercluster resource
Microsoft.ContainerService/fleets/cluster.kubernetes-fleet.io/memberclusters/writeWrite fleet membercluster resource
Microsoft.ContainerService/fleets/configmaps/readReads configmaps
Microsoft.ContainerService/fleets/configmaps/writeWrites configmaps
Microsoft.ContainerService/fleets/endpoints/readReads endpoints
Microsoft.ContainerService/fleets/endpoints/writeWrites endpoints
Microsoft.ContainerService/fleets/events.k8s.io/events/readReads events
Microsoft.ContainerService/fleets/events/readReads events
Microsoft.ContainerService/fleets/extensions/daemonsets/readReads daemonsets
Microsoft.ContainerService/fleets/extensions/daemonsets/writeWrites daemonsets
Microsoft.ContainerService/fleets/extensions/deployments/readReads deployments
Microsoft.ContainerService/fleets/extensions/deployments/writeWrites deployments
Microsoft.ContainerService/fleets/extensions/ingresses/readReads ingresses
Microsoft.ContainerService/fleets/extensions/ingresses/writeWrites ingresses
Microsoft.ContainerService/fleets/extensions/networkpolicies/readReads networkpolicies
Microsoft.ContainerService/fleets/extensions/networkpolicies/writeWrites networkpolicies
Microsoft.ContainerService/fleets/limitranges/readReads limitranges
Microsoft.ContainerService/fleets/namespaces/readReads namespaces
Microsoft.ContainerService/fleets/networking.k8s.io/ingresses/readReads ingresses
Microsoft.ContainerService/fleets/networking.k8s.io/ingresses/writeWrites ingresses
Microsoft.ContainerService/fleets/networking.k8s.io/networkpolicies/readReads networkpolicies
Microsoft.ContainerService/fleets/networking.k8s.io/networkpolicies/writeWrites networkpolicies
Microsoft.ContainerService/fleets/nodes/readReads nodes
Microsoft.ContainerService/fleets/nodes/writeWrites nodes
Microsoft.ContainerService/fleets/persistentvolumeclaims/readReads persistentvolumeclaims
Microsoft.ContainerService/fleets/persistentvolumeclaims/writeWrites persistentvolumeclaims
Microsoft.ContainerService/fleets/persistentvolumes/readReads persistentvolumes
Microsoft.ContainerService/fleets/persistentvolumes/writeWrites persistentvolumes
Microsoft.ContainerService/fleets/placement.kubernetes-fleet.io/clusterresourcebindings/readRead fleet clusterresourcebinding resource
Microsoft.ContainerService/fleets/placement.kubernetes-fleet.io/clusterresourceoverrides/readRead fleet clusterresourceoverride resource
Microsoft.ContainerService/fleets/placement.kubernetes-fleet.io/clusterresourceoverrides/writeWrite fleet clusterresourceoverride resource
Microsoft.ContainerService/fleets/placement.kubernetes-fleet.io/clusterresourceoverridesnapshots/readRead fleet clusterresourceoverridesnapshot resource
Microsoft.ContainerService/fleets/placement.kubernetes-fleet.io/clusterresourceplacements/readRead fleet clusterresourceplacement resource
Microsoft.ContainerService/fleets/placement.kubernetes-fleet.io/clusterresourceplacements/writeWrite fleet clusterresourceplacement resource
Microsoft.ContainerService/fleets/placement.kubernetes-fleet.io/clusterresourcesnapshots/readRead fleet clusterresourcesnapshot resource
Microsoft.ContainerService/fleets/placement.kubernetes-fleet.io/clusterschedulingpolicysnapshots/readRead fleet clusterschedulingpolicysnapshot resource
Microsoft.ContainerService/fleets/policy/poddisruptionbudgets/readReads poddisruptionbudgets
Microsoft.ContainerService/fleets/policy/poddisruptionbudgets/writeWrites poddisruptionbudgets
Microsoft.ContainerService/fleets/replicationcontrollers/readReads replicationcontrollers
Microsoft.ContainerService/fleets/replicationcontrollers/writeWrites replicationcontrollers
Microsoft.ContainerService/fleets/resourcequotas/readReads resourcequotas
Microsoft.ContainerService/fleets/secrets/readReads secrets
Microsoft.ContainerService/fleets/secrets/writeWrites secrets
Microsoft.ContainerService/fleets/serviceaccounts/readReads serviceaccounts
Microsoft.ContainerService/fleets/serviceaccounts/writeWrites serviceaccounts
Microsoft.ContainerService/fleets/services/readReads services
Microsoft.ContainerService/fleets/services/writeWrites services
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2024-10-21 17:52:38 add: Role 1dc4cd5a-de51-4ee4-bc8e-b40e9c17e320
JSON
api-version=2023-07-01-preview
Condition none