AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Azure Device Registry Contributor

Azure BuiltIn RBAC Role definition

NameAzure Device Registry Contributor
Ida5c3590a-3a1a-4cd4-9648-ea0a32b15137
DescriptionAllows for full access to IoT devices within Azure Device Registry Namespace.
CategoryNone
CreatedOn2025-10-09 01:48:17 UTC
UpdatedOn2025-10-22 23:19:49 UTC
Permissions summary Effective control plane and data plane operations: 19 (unique operations)
•action: 3
•delete: 4
•read: 8
•write: 4

Actions: 7
Resolved control plane operations from Actions: 15
Effective control plane operations: 15
•Action: 2
•delete: 3
•read: 7
•write: 3

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17418

DataActions: 2
Resolved data plane operations: 4
Effective data plane operations: 4
•action: 1
•delete: 1
•read: 1
•write: 1

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4074
Actions
Operation Description
microsoft.deviceregistry/namespaces/credentials/policies/readList Policy resources by Credential
microsoft.deviceregistry/namespaces/credentials/readGet a Credential
microsoft.deviceregistry/namespaces/devices/*wildcarded / no description
microsoft.deviceregistry/namespaces/discovereddevices/*wildcarded / no description
microsoft.deviceregistry/namespaces/readGet a Namespace
microsoft.devices/iothubs/certificates/*wildcarded / no description
microsoft.devices/iothubs/readGets the IotHub resource(s)
NotActions n/a
DataActions
Operation Description
microsoft.deviceregistry/namespaces/credentials/policies/issueCertificate/actionAllows certificate issuance using certificate based policies.
microsoft.devices/iothubs/devices/*wildcarded / no description
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-10-23 17:22:49 change: Actions Actions: 'add microsoft.devices/iothubs/read'
2025-10-16 17:22:54 change: DisplayName, Actions, DataActions New DisplayName: 'Azure Device Registry Contributor'
Old DisplayName: 'Azure Device Registry Contributor Role',
Actions: 'add microsoft.devices/iothubs/certificates/*',
DataActions: 'add microsoft.devices/iothubs/devices/*'
2025-10-09 17:22:43 add: Role a5c3590a-3a1a-4cd4-9648-ea0a32b15137
JSON
api-version=2023-07-01-preview
Condition none