AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Azure Customer Lockbox Approver for Subscription

Azure BuiltIn RBAC Role definition

NameAzure Customer Lockbox Approver for Subscription
Microsoft Learn
Id4dae6930-7baf-46f5-909e-0383bc931c46
DescriptionCan approve Microsoft support requests to access specific resources contained within a subscription, or the subscription itself, when Customer Lockbox for Microsoft Azure is enabled on the tenant where the subscription resides.
CategoryManagement and governance
Microsoft Learn
CreatedOn2023-10-12 18:01:15 UTC
UpdatedOn2024-08-08 19:08:54 UTC
Permissions summary Effective control plane and data plane operations: 36 (unique operations)
•action: 1
•read: 35

Actions: 6
Resolved control plane operations from Actions: 36
Effective control plane operations: 36
•action: 1
•read: 35

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17397

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.CustomerLockbox/requests/readRead Lockbox Request
Microsoft.CustomerLockbox/requests/UpdateApproval/actionUpdate Approval Microsoft.CustomerLockbox
Microsoft.Insights/eventtypes/values/readRead Activity Log events
Microsoft.Resources/subscriptions/readGets the list of subscriptions.
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2024-03-29 18:59:49 change: Description, Actions New Description: 'Can approve Microsoft support requests to access specific resources contained within a subscription, or the subscription itself, when Customer Lockbox for Microsoft Azure is enabled on the tenant where the subscription resides. - in Public Preview.'
Old Description: 'Can approve Microsoft support requests to access specific resources contained within a subscription, or the subscription itself, when Customer Lockbox for Microsoft Azure is enabled on the tenant where the subscription resides. - in Private Preview, not intended for general use.',
Actions: 'add Microsoft.Insights/eventtypes/values/read'
2023-11-08 19:40:34 change: Description, Actions New Description: 'Can approve Microsoft support requests to access specific resources contained within a subscription, or the subscription itself, when Customer Lockbox for Microsoft Azure is enabled on the tenant where the subscription resides. - in Private Preview, not intended for general use.'
Old Description: 'Can approve Microsoft support requests to access specific resources contained within a subscription, or the subscription itself, when Customer Lockbox for Microsoft Azure is enabled on the tenant where the subscription resides.',
Actions: 'add Microsoft.Authorization/*/read; add Microsoft.Resources/subscriptions/resourceGroups/read'
2023-10-24 17:35:13 change: Actions Actions: 'add Microsoft.CustomerLockbox/requests/UpdateApproval/action; add Microsoft.CustomerLockbox/requests/read'
2023-10-16 18:01:31 add: Role 4dae6930-7baf-46f5-909e-0383bc931c46
JSON
api-version=2023-07-01-preview
Condition none