AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Azure Stack HCI VM Reader

Azure BuiltIn RBAC Role definition

NameAzure Stack HCI VM Reader
Microsoft Learn
Id4b3fe76c-f777-4d24-a2d7-b027b0f7b273
DescriptionGrants permissions to view VMs
CategoryHybrid + multicloud
Microsoft Learn
CreatedOn2023-10-19 22:56:37 UTC
UpdatedOn2024-06-21 16:41:03 UTC
Permissions summary Effective control plane and data plane operations: 72 (unique operations)
•Action: 4
•Delete: 1
•read: 66
•Write: 1

Actions: 42
Resolved control plane operations from Actions: 72
Effective control plane operations: 72
•Action: 4
•Delete: 1
•read: 66
•Write: 1

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17361

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.AzureStackHCI/GalleryImages/ReadGets/Lists gallery images resource
Microsoft.AzureStackHCI/LogicalNetworks/ReadGets/Lists logical networks resource
Microsoft.AzureStackHCI/MarketplaceGalleryImages/ReadGets/Lists market place gallery images resource
Microsoft.AzureStackHCI/NetworkInterfaces/ReadGets/Lists network interfaces resource
Microsoft.AzureStackHCI/NetworkSecurityGroups/ReadGets/Lists a network security group resource
Microsoft.AzureStackHCI/NetworkSecurityGroups/SecurityRules/ReadGets/Lists security rule resource
Microsoft.AzureStackHCI/StorageContainers/ReadGets/Lists storage containers resource
Microsoft.AzureStackHCI/VirtualHardDisks/ReadGets/Lists virtual hard disk resource
Microsoft.AzureStackHCI/virtualMachineInstances/ReadGets/Lists virtual machine instance resource
Microsoft.AzureStackHCI/VirtualMachines/Extensions/ReadGets/Lists virtual machine extensions resource
Microsoft.AzureStackHCI/VirtualMachines/ReadGets/Lists virtual machine resource
Microsoft.AzureStackHCI/VirtualNetworks/ReadGets/Lists virtual networks resource
Microsoft.HybridCompute/licenses/readReads any Azure Arc licenses
Microsoft.HybridCompute/machines/extensions/readReads any Azure Arc extensions
Microsoft.HybridCompute/machines/licenseProfiles/readReads any Azure Arc licenseProfiles
Microsoft.HybridCompute/machines/patchAssessmentResults/readReads any Azure Arc patchAssessmentResults
Microsoft.HybridCompute/machines/patchAssessmentResults/softwarePatches/readReads any Azure Arc patchAssessmentResults/softwarePatches
Microsoft.HybridCompute/machines/patchInstallationResults/readReads any Azure Arc patchInstallationResults
Microsoft.HybridCompute/machines/patchInstallationResults/softwarePatches/readReads any Azure Arc patchInstallationResults/softwarePatches
Microsoft.HybridCompute/machines/readRead any Azure Arc machines
Microsoft.HybridCompute/privateLinkScopes/networkSecurityPerimeterConfigurations/readReads any Azure Arc networkSecurityPerimeterConfigurations
Microsoft.HybridCompute/privateLinkScopes/privateEndpointConnections/readRead any Azure Arc privateEndpointConnections
Microsoft.HybridCompute/privateLinkScopes/readRead any Azure Arc privateLinkScopes
Microsoft.Insights/AlertRules/Activated/ActionClassic metric alert activated
Microsoft.Insights/AlertRules/DeleteDelete a classic metric alert
Microsoft.Insights/AlertRules/Incidents/ReadRead a classic metric alert incident
Microsoft.Insights/AlertRules/ReadRead a classic metric alert
Microsoft.Insights/AlertRules/Resolved/ActionClassic metric alert resolved
Microsoft.Insights/AlertRules/Throttled/ActionClassic metric alert rule throttled
Microsoft.Insights/AlertRules/WriteCreate or update a classic metric alert
Microsoft.ResourceHealth/availabilityStatuses/readGets the availability statuses for all resources in the specified scope
Microsoft.Resources/deployments/exportTemplate/actionExport template for a deployment
Microsoft.Resources/deployments/operations/readGets or lists deployment operations.
Microsoft.Resources/deployments/operationstatuses/readGets or lists deployment operation statuses.
Microsoft.Resources/deployments/readGets or lists deployments.
Microsoft.Resources/subscriptions/operationresults/readGet the subscription operation results.
Microsoft.Resources/subscriptions/readGets the list of subscriptions.
Microsoft.Resources/subscriptions/resourcegroups/deployments/operations/readGets or lists deployment operations.
Microsoft.Resources/subscriptions/resourcegroups/deployments/operationstatuses/readGets or lists deployment operation statuses.
Microsoft.Resources/subscriptions/resourcegroups/deployments/readGets or lists deployments.
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2024-06-21 18:14:52 change: Actions Actions: 'add Microsoft.AzureStackHCI/NetworkSecurityGroups/Read; add Microsoft.AzureStackHCI/NetworkSecurityGroups/SecurityRules/Read'
2024-04-01 20:01:14 change: Actions Actions: 'add Microsoft.HybridCompute/licenses/read; add Microsoft.HybridCompute/machines/extensions/read; add Microsoft.HybridCompute/machines/licenseProfiles/read; add Microsoft.HybridCompute/machines/patchAssessmentResults/read; add Microsoft.HybridCompute/machines/patchAssessmentResults/softwarePatches/read; add Microsoft.HybridCompute/machines/patchInstallationResults/read; add Microsoft.HybridCompute/machines/patchInstallationResults/softwarePatches/read; add Microsoft.HybridCompute/machines/read; add Microsoft.HybridCompute/privateLinkScopes/networkSecurityPerimeterConfigurations/read; add Microsoft.HybridCompute/privateLinkScopes/privateEndpointConnections/read; add Microsoft.HybridCompute/privateLinkScopes/read'
2023-10-20 18:13:02 add: Role 4b3fe76c-f777-4d24-a2d7-b027b0f7b273
JSON
api-version=2023-07-01-preview
Condition none