AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

DocumentDB Account Contributor

Azure BuiltIn RBAC Role definition

NameDocumentDB Account Contributor
Microsoft Learn
Id5bd9cd88-fe45-4216-938b-f97437e15450
DescriptionLets you manage DocumentDB accounts, but not access to them.
CategoryDatabases
Microsoft Learn
CreatedOn2015-02-02 21:55:09 UTC
UpdatedOn2021-11-11 20:13:32 UTC
Permissions summary Effective control plane and data plane operations: 346 (unique operations)
•: 1
•action: 73
•delete: 32
•read: 186
•write: 54

Actions: 8
Resolved control plane operations from Actions: 346
Effective control plane operations: 346
•: 1
•action: 73
•delete: 32
•read: 186
•write: 54

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17087

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.DocumentDb/databaseAccounts/*wildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/actionJoins resource such as storage account or SQL database to a subnet. Not alertable.
Microsoft.ResourceHealth/availabilityStatuses/readGets the availability statuses for all resources in the specified scope
Microsoft.Resources/deployments/*wildcarded / no description
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
Microsoft.Support/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
Policy DisplayName Policy Id Category State
Configure Cosmos DB database accounts to disable local authentication dc2d41d1-4ab1-4666-a3e1-3d51c43e0049 Cosmos DB GA
Configure CosmosDB accounts to disable public network access da69ba51-aaf1-41e5-8651-607cd0b37088 Cosmos DB GA
Configure CosmosDB accounts with private endpoints b609e813-3156-4079-91fa-a8494c1471c4 Cosmos DB GA
Historynone
JSON
api-version=2023-07-01-preview
Condition none