AzRoleAdvertizer

last sync: 2025-Sep-16 17:22:53 UTC

SRE Agent Reader

Azure BuiltIn RBAC Role definition

NameSRE Agent Reader
Ida4b156ac-253f-4a1a-9851-96d62b71b047
DescriptionGrants read-only access to all SRE Agent data, including chats, incidents, logs, and configurations. Does not permit interaction with the agent.
CategoryNone
CreatedOn2025-09-08 15:10:31 UTC
UpdatedOn2025-09-16 15:14:53 UTC
Permissions summary Effective control plane and data plane operations: 44 (unique operations)
•: 1
•Action: 3
•Delete: 1
•read: 38
•Write: 1

Actions: 3
Resolved control plane operations from Actions: 40
Effective control plane operations: 40
•: 1
•Action: 3
•Delete: 1
•read: 34
•Write: 1

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17113

DataActions: 4
Resolved data plane operations: 4
Effective data plane operations: 4
•read: 4

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3744
Actions
Operation Description
Microsoft.App/agents/readRead SRE Agent properties
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/alertRules/*wildcarded / no description
NotActions n/a
DataActions
Operation Description
Microsoft.App/agents/graph/readRead resource graph in an SRE agent
Microsoft.App/agents/incidentManagement/readRead incident management configurations in an SRE agent
Microsoft.App/agents/memory/readRead agent memory in an SRE agent
Microsoft.App/agents/threads/readRead all the conversation threads with an SRE Agent
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-09-16 17:22:53 change: Actions, DataActions Actions: 'remove Microsoft.Resources/deployments/*; remove Microsoft.Resources/subscriptions/resourceGroups/read',
DataActions: 'remove Microsoft.App/agents/*/read; add Microsoft.App/agents/threads/read; add Microsoft.App/agents/graph/read; add Microsoft.App/agents/memory/read; add Microsoft.App/agents/incidentManagement/read'
2025-09-08 17:22:45 add: Role a4b156ac-253f-4a1a-9851-96d62b71b047
JSON
api-version=2023-07-01-preview
Condition none