AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Azure Resilience Management Drills Assets Administrator

Azure BuiltIn RBAC Role definition

NameAzure Resilience Management Drills Assets Administrator
Id5a2ec2f1-2375-4950-9906-59ec1d979249
DescriptionThis Role grants permissions on the Chaos Subscription to create, read, and delete Resource Groups, Automation Accounts, and Chaos Experiments, and assigns necessary roles to Drill and Chaos MSIs for executing post actions required by Azure Resilience Management Drills.
CategoryNone
CreatedOn2025-10-31 13:28:22 UTC
UpdatedOn2025-10-31 13:28:22 UTC
Permissions summary Effective control plane and data plane operations: 46 (unique operations)
•delete: 4
•read: 37
•write: 5

Actions: 16
Resolved control plane operations from Actions: 46
Effective control plane operations: 46
•delete: 4
•read: 37
•write: 5

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17387

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Authorization/roleAssignments/writeCreate a role assignment at the specified scope.
Microsoft.Automation/automationAccounts/deleteDeletes an Azure Automation account
Microsoft.Automation/automationAccounts/readGets an Azure Automation account
Microsoft.Automation/automationAccounts/runbooks/deleteDeletes an Azure Automation runbook
Microsoft.Automation/automationAccounts/runbooks/readGets an Azure Automation runbook
Microsoft.Automation/automationAccounts/runbooks/writeCreates or updates an Azure Automation runbook
Microsoft.Automation/automationAccounts/writeCreates or updates an Azure Automation account
Microsoft.Chaos/experiments/deleteDeletes a Chaos Experiment resource in a resource group.
Microsoft.Chaos/experiments/readGets all Chaos Experiments in a resource group.
Microsoft.Chaos/experiments/writeCreates or updates a Chaos Experiment resource in a resource group.
Microsoft.Chaos/locations/operationResults/readGets an Operation Result.
Microsoft.Chaos/locations/operationStatuses/readGets an Operation Status.
Microsoft.Resources/subscriptions/resourceGroups/deleteDeletes a resource group and all its resources.
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
Microsoft.Resources/subscriptions/resourceGroups/writeCreates or updates a resource group.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-10-31 18:22:44 add: Role 5a2ec2f1-2375-4950-9906-59ec1d979249
JSON
api-version=2023-07-01-preview
Condition none