AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Azure Sphere Reader

Azure BuiltIn RBAC Role definition

NameAzure Sphere Reader
Idc8ae6279-5a0b-4cb2-b3f0-d4d62845742c
DescriptionAllows user to read Azure Sphere resources.
CategoryNone
CreatedOn2023-05-05 22:39:42 UTC
UpdatedOn2023-05-11 22:10:28 UTC
Permissions summary Effective control plane and data plane operations: 50 (unique operations)
•action: 8
•read: 42

Actions: 12
Resolved control plane operations from Actions: 50
Effective control plane operations: 50
•action: 8
•read: 42

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17383

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.AzureSphere/*/readwildcarded / no description
Microsoft.AzureSphere/catalogs/certificates/retrieveCertChain/actionRetrieves cert chain.
Microsoft.AzureSphere/catalogs/countDevices/actionCounts devices in catalog.
Microsoft.AzureSphere/catalogs/listDeployments/actionLists deployments for catalog.
Microsoft.AzureSphere/catalogs/listDeviceGroups/actionList the device groups for the catalog.
Microsoft.AzureSphere/catalogs/listDeviceInsights/actionLists device insights for catalog.
Microsoft.AzureSphere/catalogs/listDevices/actionLists devices for catalog.
Microsoft.AzureSphere/catalogs/products/countDevices/actionCounts devices in product. '.default' and '.unassigned' are system defined values and cannot be used for product name.
Microsoft.AzureSphere/catalogs/products/deviceGroups/countDevices/actionCounts devices in device group. '.default' and '.unassigned' are system defined values and cannot be used for product or device group name.
Microsoft.Insights/DiagnosticSettings/ReadRead a resource diagnostic setting
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2023-05-15 17:41:20 change: Actions Actions: 'add Microsoft.AzureSphere/catalogs/certificates/retrieveCertChain/action; add Microsoft.Insights/DiagnosticSettings/Read'
2023-05-08 17:44:42 add: Role c8ae6279-5a0b-4cb2-b3f0-d4d62845742c
JSON
api-version=2023-07-01-preview
Condition none