AzRoleAdvertizer

last sync: 2025-May-16 17:48:11 UTC

API Management Workspace Reader

Azure BuiltIn RBAC Role definition

Name

API Management Workspace Reader
Microsoft Learn

ef1c2c96-4a77-49e8-b9a4-6179fe1d2fd2

Description

Has read-only access to entities in the workspace. This role should be assigned on the workspace scope.

Category

Integration
Microsoft Learn

CreatedOn

2023-03-21 15:13:44 UTC

UpdatedOn

2025-05-14 15:26:59 UTC

Permissions summary

Effective control plane and data plane operations: 74 (unique operations)
•read: 74

Actions: 5
Resolved control plane operations from Actions: 74
Effective control plane operations: 74
•read: 74

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 16469

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 3402

Actions

Operation	Description
Microsoft.ApiManagement/service/workspaces/*/read	wildcarded / no description
Microsoft.Authorization/*/read	wildcarded / no description
Microsoft.Insights/diagnosticSettings/*/read	wildcarded / no description
Microsoft.insights/logs/ApiManagementGatewayLogs/read	Read data from the ApiManagementGatewayLogs table
Microsoft.insights/logs/read	Reading data from all your logs

NotActions

n/a

DataActions

n/a

NotDataActions

n/a

Used in
BuiltIn Policy

none

History

Date/Time (UTC ymd) (i)	Change	Change detail
2025-05-14 18:51:55	change: Actions	Actions: 'add Microsoft.Insights/diagnosticSettings/*/read; add Microsoft.insights/logs/read; add Microsoft.insights/logs/ApiManagementGatewayLogs/read'
2023-03-22 18:43:07	add: Role	ef1c2c96-4a77-49e8-b9a4-6179fe1d2fd2

JSON

api-version=2023-07-01-preview

{9 itemsroleName: "API Management Workspace Reader",
type: "BuiltInRole",
description: "Has read-only access to entities in the workspace. This role should be assigned on the workspace scope.",
assignableScopes: [1 item"/"
],
permissions: [1 item{4 itemsactions: [5 items"Microsoft.ApiManagement/service/workspaces/*/read",
"Microsoft.Authorization/*/read",
"Microsoft.Insights/diagnosticSettings/*/read",
"Microsoft.insights/logs/read",
"Microsoft.insights/logs/ApiManagementGatewayLogs/read"
],
notActions: [],
dataActions: [],
notDataActions: []
}
],
createdOn: "2023-03-21T15:13:44.4040114Z",
updatedOn: "2025-05-14T15:26:59.0317591Z",
createdBy: null,
updatedBy: null
}

Condition

none