AzRoleAdvertizer

last sync: 2025-Oct-31 18:22:44 UTC

Cosmos DB Account Reader Role

Azure BuiltIn RBAC Role definition

NameCosmos DB Account Reader Role
Microsoft Learn
Idfbdf93bf-df7d-467e-a4d2-9458aa1360c8
DescriptionCan read Azure Cosmos DB Accounts data
CategoryDatabases
Microsoft Learn
CreatedOn2017-10-30 17:53:54 UTC
UpdatedOn2021-11-11 20:13:28 UTC
Permissions summary Effective control plane and data plane operations: 211 (unique operations)
•action: 6
•read: 204
•write: 1

Actions: 7
Resolved control plane operations from Actions: 211
Effective control plane operations: 211
•action: 6
•read: 204
•write: 1

NotActions: 0
Resolved control plane operations from NotActions: 0
Effective denied control plane operations: 17222

DataActions: 0
Resolved data plane operations: 0
Effective data plane operations: 0

NotDataActions: 0
Resolved data plane operations from NotDataActions: 0
Effective denied data plane operations: 4078
Actions
Operation Description
Microsoft.Authorization/*/readwildcarded / no description
Microsoft.DocumentDB/*/readwildcarded / no description
Microsoft.DocumentDB/databaseAccounts/readonlykeys/actionReads the database account readonly keys.
Microsoft.Insights/MetricDefinitions/readRead metric definitions
Microsoft.Insights/Metrics/readRead metrics
Microsoft.Resources/subscriptions/resourceGroups/readGets or lists resource groups.
Microsoft.Support/*wildcarded / no description
NotActions n/a
DataActions n/a
NotDataActions n/a
Used in
BuiltIn Policy		 none
Historynone
JSON
api-version=2023-07-01-preview
Condition none