AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Container Registry Repository Writer

Azure BuiltIn RBAC Role definition

NameContainer Registry Repository Writer
Microsoft Learn
Id2a1e307c-b015-4ebd-883e-5b7698a07328
DescriptionAllows for read and write access to Azure Container Registry repositories, but excluding catalog listing.
CategoryContainers
Microsoft Learn
CreatedOn2024-06-05 15:32:11 UTC
UpdatedOn2025-10-03 17:14:16 UTC
Permissions summary Effective control plane and data plane operations: 4 (unique operations)
•read: 2
•write: 2

Actions: 0
Resolved control plane operations from Actions: 0
Effective control plane operations: 0

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17433

DataActions: 4
Resolved data plane operations: 4
Effective data plane operations: 4
•read: 2
•write: 2

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4074
Actions n/a
NotActions n/a
DataActions
Operation Description
Microsoft.ContainerRegistry/registries/repositories/content/readPull or Get images from a container registry.
Microsoft.ContainerRegistry/registries/repositories/content/writePush or Write images to a container registry.
Microsoft.ContainerRegistry/registries/repositories/metadata/readGets the metadata of a specific repository for a container registry
Microsoft.ContainerRegistry/registries/repositories/metadata/writeUpdates the metadata of a repository for a container registry
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2024-06-05 18:15:20 add: Role 2a1e307c-b015-4ebd-883e-5b7698a07328
JSON
api-version=2023-07-01-preview
Condition none