AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Azure Connected Machine Resource Administrator

Azure BuiltIn RBAC Role definition

NameAzure Connected Machine Resource Administrator
Microsoft Learn
Idcd570a14-e51a-42ad-bac8-bafd67325302
DescriptionCan read, write, delete and re-onboard Azure Connected Machines.
CategoryManagement and governance
Microsoft Learn
CreatedOn2019-10-23 20:24:59 UTC
UpdatedOn2025-01-31 22:43:26 UTC
Permissions summary Effective control plane and data plane operations: 66 (unique operations)
•action: 15
•delete: 11
•read: 28
•write: 12

Actions: 12
Resolved control plane operations from Actions: 66
Effective control plane operations: 66
•action: 15
•delete: 11
•read: 28
•write: 12

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17367

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.HybridCompute/*/readwildcarded / no description
Microsoft.HybridCompute/gateways/*wildcarded / no description
Microsoft.HybridCompute/licenses/*wildcarded / no description
Microsoft.HybridCompute/locations/*wildcarded / no description
Microsoft.HybridCompute/machines/*wildcarded / no description
Microsoft.HybridCompute/machines/extensions/*wildcarded / no description
Microsoft.HybridCompute/machines/licenseProfiles/*wildcarded / no description
Microsoft.HybridCompute/machines/runCommands/*wildcarded / no description
Microsoft.HybridCompute/machines/UpgradeExtensions/actionUpgrades Extensions on Azure Arc machines
Microsoft.HybridCompute/privateLinkScopes/*wildcarded / no description
Microsoft.HybridCompute/settings/*wildcarded / no description
Microsoft.Resources/deployments/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy
Policy DisplayName Policy Id Category State
Configure Arc-enabled SQL Servers to automatically install Azure Monitor Agent 3592ff98-9787-443a-af59-4505d0fe0786 Security Center GA
Configure Azure Arc Private Link Scopes to disable public network access de0bc8ea-76e2-4fe2-a288-a07556d0e9c4 Azure Arc GA
Configure Azure Arc Private Link Scopes with private endpoints d6eeba80-df61-4de5-8772-bc1b7852ba6b Azure Arc GA
Configure Azure Arc-enabled servers to use an Azure Arc Private Link Scope a3461c8c-6c9d-4e42-a644-40ba8a1abf49 Azure Arc GA
Configure ChangeTracking Extension for Linux Arc machines 10caed8a-652c-4d1d-84e4-2805b7c07278 Security Center GA
Configure ChangeTracking Extension for Windows Arc machines 4bb303db-d051-4099-95d2-e3e1428a4cd5 Security Center GA
Configure Linux Arc-enabled machines to run Azure Monitor Agent 845857af-0333-4c5d-bbbc-6076697da122 Monitoring GA
Configure Linux Arc-enabled machines to to install AMA for ChangeTracking and Inventory 09a1f130-7697-42bc-8d84-8a9ea17e5187 ChangeTrackingAndInventory GA
Configure periodic checking for missing system updates on azure Arc-enabled servers bfea026e-043f-4ff4-9d1b-bf301ca7ff46 Azure Update Manager GA
Configure Windows Arc-enabled machines to install AMA for ChangeTracking and Inventory a7acfae7-9497-4a3f-a3b5-a16a50abbe2f ChangeTrackingAndInventory GA
Configure Windows Arc-enabled machines to run Azure Monitor Agent 94f686d6-9a24-4e19-91f1-de937dc171a4 Monitoring GA
History
Date/Time (UTC ymd) (i) Change Change detail
2025-02-03 19:46:16 change: Actions Actions: 'add Microsoft.HybridCompute/settings/*; add Microsoft.HybridCompute/gateways/*'
2024-08-20 18:22:10 change: Actions Actions: 'remove Microsoft.HybridCompute/machines/read; remove Microsoft.HybridCompute/machines/write; remove Microsoft.HybridCompute/machines/delete; remove Microsoft.HybridCompute/machines/extensions/read; remove Microsoft.HybridCompute/machines/extensions/write; remove Microsoft.HybridCompute/machines/extensions/delete; remove Microsoft.HybridCompute/licenses/write; remove Microsoft.HybridCompute/licenses/delete; remove Microsoft.HybridCompute/machines/licenseProfiles/read; remove Microsoft.HybridCompute/machines/licenseProfiles/write; remove Microsoft.HybridCompute/machines/licenseProfiles/delete; remove Microsoft.HybridCompute/machines/runCommands/read; remove Microsoft.HybridCompute/machines/runCommands/write; remove Microsoft.HybridCompute/machines/runCommands/delete; add Microsoft.HybridCompute/machines/*; add Microsoft.HybridCompute/machines/extensions/*; add Microsoft.HybridCompute/machines/licenseProfiles/*; add Microsoft.HybridCompute/machines/runCommands/*; add Microsoft.HybridCompute/licenses/*; add Microsoft.HybridCompute/locations/*'
2024-03-19 19:11:48 change: Actions Actions: 'add Microsoft.HybridCompute/machines/runCommands/read; add Microsoft.HybridCompute/machines/runCommands/write; add Microsoft.HybridCompute/machines/runCommands/delete'
2023-11-14 18:15:11 change: Actions Actions: 'add Microsoft.HybridCompute/licenses/write; add Microsoft.HybridCompute/licenses/delete; add Microsoft.HybridCompute/machines/licenseProfiles/read; add Microsoft.HybridCompute/machines/licenseProfiles/write; add Microsoft.HybridCompute/machines/licenseProfiles/delete'
2021-12-15 17:18:05 change: Actions Actions: 'add Microsoft.Resources/deployments/*'
2021-06-09 16:50:31 change: Actions Actions: 'add Microsoft.HybridCompute/machines/UpgradeExtensions/action'
2021-04-29 16:55:26 change: Actions Actions: 'add Microsoft.HybridCompute/machines/extensions/read; add Microsoft.HybridCompute/machines/extensions/delete'
2021-03-24 14:32:47 change: Actions Actions: 'remove Microsoft.HybridCompute/machines/reconnect/action; add Microsoft.HybridCompute/privateLinkScopes/*'
2019-10-24 02:15:32 add: Role cd570a14-e51a-42ad-bac8-bafd67325302
JSON
api-version=2023-07-01-preview
Condition none