AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

API Management Workspace Reader

Azure BuiltIn RBAC Role definition

NameAPI Management Workspace Reader
Microsoft Learn
Idef1c2c96-4a77-49e8-b9a4-6179fe1d2fd2
DescriptionHas read-only access to entities in the workspace. This role should be assigned on the workspace scope.
CategoryIntegration
Microsoft Learn
CreatedOn2023-03-21 15:13:44 UTC
UpdatedOn2025-05-14 15:26:59 UTC
Permissions summary Effective control plane and data plane operations: 75 (unique operations)
•read: 75

Actions: 5
Resolved control plane operations from Actions: 75
Effective control plane operations: 75
•read: 75

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17358

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.ApiManagement/service/workspaces/*/readwildcarded / no description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.Insights/diagnosticSettings/*/readwildcarded / no description
Microsoft.insights/logs/ApiManagementGatewayLogs/readRead data from the ApiManagementGatewayLogs table
Microsoft.insights/logs/readReading data from all your logs
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
History
Date/Time (UTC ymd) (i) Change Change detail
2025-05-14 18:51:55 change: Actions Actions: 'add Microsoft.Insights/diagnosticSettings/*/read; add Microsoft.insights/logs/read; add Microsoft.insights/logs/ApiManagementGatewayLogs/read'
2023-03-22 18:43:07 add: Role ef1c2c96-4a77-49e8-b9a4-6179fe1d2fd2
JSON
api-version=2023-07-01-preview
Condition none