AzRoleAdvertizer

last sync: 2025-Jun-02 17:23:44 UTC

Device Update Deployments Reader

Azure BuiltIn RBAC Role definition

Name

Device Update Deployments Reader
Microsoft Learn

49e2f5d2-7741-4835-8efa-19e1fe35e47f

Description

Gives you read access to management operations, but does not allow making changes

Category

Internet of Things
Microsoft Learn

CreatedOn

2020-08-22 00:01:34 UTC

UpdatedOn

2022-01-13 01:35:51 UTC

Permissions summary

Effective control plane and data plane operations: 59 (unique operations)
•Action: 10
•Delete: 2
•read: 44
•Write: 3

Actions: 5
Resolved control plane operations from Actions: 57
Effective control plane operations: 57
•Action: 10
•Delete: 2
•read: 42
•Write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16527

DataActions: 2
Resolved data plane operations: 2
Effective data plane operations: 2
•read: 2

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3484

Actions

Operation	Description
Microsoft.Authorization/*/read	wildcarded / no description
Microsoft.Insights/alertRules/*	wildcarded / no description
Microsoft.Resources/deployments/*	wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/read	Gets or lists resource groups.
Microsoft.Support/*	wildcarded / no description

NotActions

n/a

DataActions

Operation	Description
Microsoft.DeviceUpdate/accounts/instances/management/read	Performs a read operation related to management
Microsoft.DeviceUpdate/accounts/instances/updates/read	Performs a read operation related to updates

NotDataActions

n/a

Used in
BuiltIn Policy

none

History

Date/Time (UTC ymd) (i)	Change	Change detail
2022-01-13 19:18:33	change: DataActions	DataActions: 'add Microsoft.DeviceUpdate/accounts/instances/updates/read'
2020-08-23 16:02:03	add: Role	49e2f5d2-7741-4835-8efa-19e1fe35e47f

JSON

api-version=2023-07-01-preview

{9 itemsroleName: "Device Update Deployments Reader",
type: "BuiltInRole",
description: "Gives you read access to management operations, but does not allow making changes",
assignableScopes: [1 item"/"
],
permissions: [1 item{4 itemsactions: [5 items"Microsoft.Authorization/*/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*",
"Microsoft.Insights/alertRules/*"
],
notActions: [],
dataActions: [2 items"Microsoft.DeviceUpdate/accounts/instances/management/read",
"Microsoft.DeviceUpdate/accounts/instances/updates/read"
],
notDataActions: []
}
],
createdOn: "2020-08-22T00:01:34.705363Z",
updatedOn: "2022-01-13T01:35:51.6463216Z",
createdBy: null,
updatedBy: null
}

Condition

none