AzRoleAdvertizer

last sync: 2025-Aug-01 17:22:47 UTC

API Management Workspace Reader

Azure BuiltIn RBAC Role definition

Name

API Management Workspace Reader
Microsoft Learn

ef1c2c96-4a77-49e8-b9a4-6179fe1d2fd2

Description

Has read-only access to entities in the workspace. This role should be assigned on the workspace scope.

Category

Integration
Microsoft Learn

CreatedOn

2023-03-22 15:15:20 UTC

UpdatedOn

2025-05-15 15:41:09 UTC

Permissions summary

Effective control plane and data plane operations: 75 (unique operations)
•read: 75

Actions: 5
Resolved control plane operations from Actions: 75
Effective control plane operations: 75
•read: 75

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16819

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3587

Actions

Operation	Description
Microsoft.ApiManagement/service/workspaces/*/read	wildcarded / no description
Microsoft.Authorization/*/read	wildcarded / no description
Microsoft.Insights/diagnosticSettings/*/read	wildcarded / no description
Microsoft.insights/logs/ApiManagementGatewayLogs/read	Read data from the ApiManagementGatewayLogs table
Microsoft.insights/logs/read	Reading data from all your logs

NotActions

n/a

DataActions

n/a

NotDataActions

n/a

Used in
BuiltIn Policy

none

History

Date/Time (UTC ymd) (i)	Change	Change detail
2025-05-14 18:51:55	change: Actions	Actions: 'add Microsoft.Insights/diagnosticSettings/*/read; add Microsoft.insights/logs/read; add Microsoft.insights/logs/ApiManagementGatewayLogs/read'
2023-03-22 18:43:07	add: Role	ef1c2c96-4a77-49e8-b9a4-6179fe1d2fd2

JSON

api-version=2023-07-01-preview

Condition

none