Microsoft's edit · Azure built-in roles · ai machine learning

77 author: rolyon

88 manager: femila

99 ms.author: rolyon

10 −ms.date: 01/25/2025

11 −ms.custom: generated

12 −---

13 −

14 −# Azure built-in roles for AI + machine learning

15 −

16 −This article lists the Azure built-in roles in the AI + machine learning category.

17 −

18 −

19 −## AgFood Platform Sensor Partner Contributor

20 −

21 −Provides contribute access to manage sensor related entities in AgFood Platform Service

22 −

23 −[Learn more](/azure/data-manager-for-agri/how-to-set-up-sensors-customer)

24 −

25 −> [!div class="mx-tableFixed"]

26 −> | Actions | Description |

27 −> | --- | --- |

28 −> | *none* | |

29 −> | **NotActions** | |

30 −> | *none* | |

31 −> | **DataActions** | |

32 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/farmBeats/sensorPartnerScope/* | |

33 −> | **NotDataActions** | |

34 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/farmBeats/sensorPartnerScope/sensors/delete | Deletes an existing AgFoodPlatform sensors resource restricted to caller's sensor partner scope. |

35 −

36 −```json

37 −{

38 − "assignableScopes": [

39 − "/"

40 − ],

41 − "description": "Provides contribute access to manage sensor related entities in AgFood Platform Service",

42 − "id": "/providers/Microsoft.Authorization/roleDefinitions/6b77f0a0-0d89-41cc-acd1-579c22c17a67",

43 − "name": "6b77f0a0-0d89-41cc-acd1-579c22c17a67",

44 − "permissions": [

45 − {

46 − "actions": [],

47 − "notActions": [],

48 − "dataActions": [

49 − "Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/*"

50 − ],

51 − "notDataActions": [

52 − "Microsoft.AgFoodPlatform/farmBeats/sensorPartnerScope/sensors/delete"

53 − ]

54 − }

55 − ],

56 − "roleName": "AgFood Platform Sensor Partner Contributor",

57 − "roleType": "BuiltInRole",

58 − "type": "Microsoft.Authorization/roleDefinitions"

59 −}

60 −```

61 −

62 −## AgFood Platform Service Admin

63 −

64 −Provides admin access to AgFood Platform Service

65 −

66 −[Learn more](/azure/data-manager-for-agri/quickstart-install-data-manager-for-agriculture)

67 −

68 −> [!div class="mx-tableFixed"]

69 −> | Actions | Description |

70 −> | --- | --- |

71 −> | *none* | |

72 −> | **NotActions** | |

73 −> | *none* | |

74 −> | **DataActions** | |

75 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/* | Create, update, read and delete any AgFood Platform resources. |

76 −> | **NotDataActions** | |

77 −> | *none* | |

78 −

79 −```json

80 −{

81 − "assignableScopes": [

82 − "/"

83 − ],

84 − "description": "Provides admin access to AgFood Platform Service",

85 − "id": "/providers/Microsoft.Authorization/roleDefinitions/f8da80de-1ff9-4747-ad80-a19b7f6079e3",

86 − "name": "f8da80de-1ff9-4747-ad80-a19b7f6079e3",

87 − "permissions": [

88 − {

89 − "actions": [],

90 − "notActions": [],

91 − "dataActions": [

92 − "Microsoft.AgFoodPlatform/*"

93 − ],

94 − "notDataActions": []

95 − }

96 − ],

97 − "roleName": "AgFood Platform Service Admin",

98 − "roleType": "BuiltInRole",

99 − "type": "Microsoft.Authorization/roleDefinitions"

100 −}

101 −```

102 −

103 −## AgFood Platform Service Contributor

104 −

105 −Provides contribute access to AgFood Platform Service

106 −

107 −[Learn more](/azure/data-manager-for-agri/quickstart-install-data-manager-for-agriculture)

108 −

109 −> [!div class="mx-tableFixed"]

110 −> | Actions | Description |

111 −> | --- | --- |

112 −> | *none* | |

113 −> | **NotActions** | |

114 −> | *none* | |

115 −> | **DataActions** | |

116 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/action | |

117 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/read | Read any AgFood Platform resources. |

118 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/write | Create and update any AgFood Platform resources. |

119 −> | **NotDataActions** | |

120 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/farmBeats/farmers/write | Creates or Updates AgFoodPlatform farmers. |

121 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/farmBeats/deletionJobs/*/write | |

122 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/farmBeats/parties/write | Creates or Updates AgFoodPlatform parties. |

123 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/farmBeats/datasets/write | Creates or Updates AgFoodPlatform datasets. |

124 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/farmBeats/datasetRecords/write | Creates or Updates AgFoodPlatform Dataset Records. |

125 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/farmBeats/datasets/access/*/action | |

126 −

127 −```json

128 −{

129 − "assignableScopes": [

130 − "/"

131 − ],

132 − "description": "Provides contribute access to AgFood Platform Service",

133 − "id": "/providers/Microsoft.Authorization/roleDefinitions/8508508a-4469-4e45-963b-2518ee0bb728",

134 − "name": "8508508a-4469-4e45-963b-2518ee0bb728",

135 − "permissions": [

136 − {

137 − "actions": [],

138 − "notActions": [],

139 − "dataActions": [

140 − "Microsoft.AgFoodPlatform/*/action",

141 − "Microsoft.AgFoodPlatform/*/read",

142 − "Microsoft.AgFoodPlatform/*/write"

143 − ],

144 − "notDataActions": [

145 − "Microsoft.AgFoodPlatform/farmBeats/farmers/write",

146 − "Microsoft.AgFoodPlatform/farmBeats/deletionJobs/*/write",

147 − "Microsoft.AgFoodPlatform/farmBeats/parties/write",

148 − "Microsoft.AgFoodPlatform/farmBeats/datasets/write",

149 − "Microsoft.AgFoodPlatform/farmBeats/datasetRecords/write",

150 − "Microsoft.AgFoodPlatform/farmBeats/datasets/access/*/action"

151 − ]

152 − }

153 − ],

154 − "roleName": "AgFood Platform Service Contributor",

155 − "roleType": "BuiltInRole",

156 − "type": "Microsoft.Authorization/roleDefinitions"

157 −}

158 −```

159 −

160 −## AgFood Platform Service Reader

161 −

162 −Provides read access to AgFood Platform Service

163 −

164 −[Learn more](/azure/data-manager-for-agri/quickstart-install-data-manager-for-agriculture)

165 −

166 −> [!div class="mx-tableFixed"]

167 −> | Actions | Description |

168 −> | --- | --- |

169 −> | *none* | |

170 −> | **NotActions** | |

171 −> | *none* | |

172 −> | **DataActions** | |

173 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/list/action | |

174 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/read | Read any AgFood Platform resources. |

175 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/search/action | |

176 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/download/action | |

177 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/overlap/action | |

178 −> | [Microsoft.AgFoodPlatform](../permissions/ai-machine-learning.md#microsoftagfoodplatform)/*/checkConsent/action | |

179 −> | **NotDataActions** | |

180 −> | *none* | |

181 −

182 −```json

183 −{

184 − "assignableScopes": [

185 − "/"

186 − ],

187 − "description": "Provides read access to AgFood Platform Service",

188 − "id": "/providers/Microsoft.Authorization/roleDefinitions/7ec7ccdc-f61e-41fe-9aaf-980df0a44eba",

189 − "name": "7ec7ccdc-f61e-41fe-9aaf-980df0a44eba",

190 − "permissions": [

191 − {

192 − "actions": [],

193 − "notActions": [],

194 − "dataActions": [

195 − "Microsoft.AgFoodPlatform/*/list/action",

196 − "Microsoft.AgFoodPlatform/*/read",

197 − "Microsoft.AgFoodPlatform/*/search/action",

198 − "Microsoft.AgFoodPlatform/*/download/action",

199 − "Microsoft.AgFoodPlatform/*/overlap/action",

200 − "Microsoft.AgFoodPlatform/*/checkConsent/action"

201 − ],

202 − "notDataActions": []

203 − }

204 − ],

205 − "roleName": "AgFood Platform Service Reader",

206 − "roleType": "BuiltInRole",

207 − "type": "Microsoft.Authorization/roleDefinitions"

208 −}

209 −```

210 −

211 −## Azure AI Developer

212 −

213 −Can perform all actions within an Azure AI resource besides managing the resource itself.

214 −

215 −[Learn more](/azure/ai-studio/concepts/rbac-ai-studio)

216 −

217 −> [!div class="mx-tableFixed"]

218 −> | Actions | Description |

219 −> | --- | --- |

220 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/*/read | |

221 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/*/action | |

222 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/*/delete | |

223 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/*/write | |

224 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/locations/*/read | |

225 −> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |

226 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |

227 −> | **NotActions** | |

228 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/delete | Deletes the Machine Learning Services Workspace(s) |

229 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/write | Creates or updates a Machine Learning Services Workspace(s) |

230 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/listKeys/action | List secrets for a Machine Learning Services Workspace |

231 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/hubs/write | Creates or updates a Machine Learning Services Hub Workspace(s) |

232 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/hubs/delete | Deletes the Machine Learning Services Hub Workspace(s) |

233 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/featurestores/write | Creates or Updates the Machine Learning Services FeatureStore(s) |

234 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/featurestores/delete | Deletes the Machine Learning Services FeatureStore(s) |

235 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/evaluations/results/labels/read | Reads evaluation results' label from a Machine Learning Services Workspace |

236 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/evaluations/results/reasonings/read | Reads evaluation results' reasoning from a Machine Learning Services Workspace |

237 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/simulations/results/images/read | Reads image simulation results from a Machine Learning Services Workspace |

238 −> | **DataActions** | |

239 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/OpenAI/* | |

240 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/SpeechServices/* | |

241 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/ContentSafety/* | |

242 −> | **NotDataActions** | |

243 −> | *none* | |

244 −

245 −```json

246 −{

247 − "assignableScopes": [

248 − "/"

249 − ],

250 − "description": "Can perform all actions within an Azure AI resource besides managing the resource itself.",

251 − "id": "/providers/Microsoft.Authorization/roleDefinitions/64702f94-c441-49e6-a78b-ef80e0188fee",

252 − "name": "64702f94-c441-49e6-a78b-ef80e0188fee",

253 − "permissions": [

254 − {

255 − "actions": [

256 − "Microsoft.MachineLearningServices/workspaces/*/read",

257 − "Microsoft.MachineLearningServices/workspaces/*/action",

258 − "Microsoft.MachineLearningServices/workspaces/*/delete",

259 − "Microsoft.MachineLearningServices/workspaces/*/write",

260 − "Microsoft.MachineLearningServices/locations/*/read",

261 − "Microsoft.Authorization/*/read",

262 − "Microsoft.Resources/deployments/*"

263 − ],

264 − "notActions": [

265 − "Microsoft.MachineLearningServices/workspaces/delete",

266 − "Microsoft.MachineLearningServices/workspaces/write",

267 − "Microsoft.MachineLearningServices/workspaces/listKeys/action",

268 − "Microsoft.MachineLearningServices/workspaces/hubs/write",

269 − "Microsoft.MachineLearningServices/workspaces/hubs/delete",

270 − "Microsoft.MachineLearningServices/workspaces/featurestores/write",

271 − "Microsoft.MachineLearningServices/workspaces/featurestores/delete",

272 − "Microsoft.MachineLearningServices/workspaces/evaluations/results/labels/read",

273 − "Microsoft.MachineLearningServices/workspaces/evaluations/results/reasonings/read",

274 − "Microsoft.MachineLearningServices/workspaces/simulations/results/images/read"

275 − ],

276 − "dataActions": [

277 − "Microsoft.CognitiveServices/accounts/OpenAI/*",

278 − "Microsoft.CognitiveServices/accounts/SpeechServices/*",

279 − "Microsoft.CognitiveServices/accounts/ContentSafety/*"

280 − ],

281 − "notDataActions": []

282 − }

283 − ],

284 − "roleName": "Azure AI Developer",

285 − "roleType": "BuiltInRole",

286 − "type": "Microsoft.Authorization/roleDefinitions"

287 −}

288 −```

289 −

290 −## Azure AI Enterprise Network Connection Approver

291 −

292 −Can approve private endpoint connections to Azure AI common dependency resources

293 −

294 −[Learn more](/azure/machine-learning/how-to-managed-network)

295 −

296 −> [!div class="mx-tableFixed"]

297 −> | Actions | Description |

298 −> | --- | --- |

299 −> | [Microsoft.ContainerRegistry](../permissions/containers.md#microsoftcontainerregistry)/registries/privateEndpointConnectionsApproval/action | Auto Approves a Private Endpoint Connection |

300 −> | [Microsoft.ContainerRegistry](../permissions/containers.md#microsoftcontainerregistry)/registries/privateEndpointConnections/read | Gets the properties of private endpoint connection or list all the private endpoint connections for the specified container registry |

301 −> | [Microsoft.ContainerRegistry](../permissions/containers.md#microsoftcontainerregistry)/registries/privateEndpointConnections/write | Approves/Rejects the private endpoint connection |

302 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redis/read | View the Redis Cache's settings and configuration in the management portal |

303 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redis/privateEndpointConnections/read | Read a private endpoint connection |

304 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redis/privateEndpointConnections/write | Write a private endpoint connection |

305 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redis/privateLinkResources/read | Read 'groupId' of redis subresource that a private link can be connected to |

306 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redis/privateEndpointConnectionsApproval/action | Approve Private Endpoint Connections |

307 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redisEnterprise/read | View the Redis Enterprise cache's settings and configuration in the management portal |

308 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redisEnterprise/privateEndpointConnections/read | Read a private endpoint connection |

309 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redisEnterprise/privateEndpointConnections/write | Write a private endpoint connection |

310 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redisEnterprise/privateLinkResources/read | Read 'groupId' of redis subresource that a private link can be connected to |

311 −> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redisEnterprise/privateEndpointConnectionsApproval/action | Approve Private Endpoint Connections |

312 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/read | Reads API accounts. |

313 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/privateEndpointConnections/read | Reads private endpoint connections. |

314 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/privateEndpointConnections/write | Writes a private endpoint connections. |

315 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/privateLinkResources/read | Reads private link resources for an account. |

316 −> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/privateEndpointConnectionsApproval/action | Manage a private endpoint connection of Database Account |

317 −> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/privateEndpointConnections/read | Read a private endpoint connection or list all the private endpoint connections of a Database Account |

318 −> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/privateEndpointConnections/write | Create or update a private endpoint connection of a Database Account |

319 −> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/privateLinkResources/read | Read a private link resource or list all the private link resources of a Database Account |

320 −> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/read | Reads a database account. |

321 −> | [Microsoft.KeyVault](../permissions/security.md#microsoftkeyvault)/vaults/privateEndpointConnectionsApproval/action | Approve or reject a connection to a Private Endpoint resource of Microsoft.Network provider |

322 −> | [Microsoft.KeyVault](../permissions/security.md#microsoftkeyvault)/vaults/privateEndpointConnections/read | View the state of a connection to a Private Endpoint resource of Microsoft.Network provider |

323 −> | [Microsoft.KeyVault](../permissions/security.md#microsoftkeyvault)/vaults/privateEndpointConnections/write | Change the state of a connection to a Private Endpoint resource of Microsoft.Network provider |

324 −> | [Microsoft.KeyVault](../permissions/security.md#microsoftkeyvault)/vaults/privateLinkResources/read | Get the available private link resources for the specified instance of Key Vault |

325 −> | [Microsoft.KeyVault](../permissions/security.md#microsoftkeyvault)/vaults/read | View the properties of a key vault |

326 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/privateEndpointConnectionsApproval/action | Approve or reject a connection to a Private Endpoint resource of Microsoft.Network provider |

327 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/privateEndpointConnections/read | View the state of a connection to a Private Endpoint resource of Microsoft.Network provider |

328 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/privateEndpointConnections/write | Change the state of a connection to a Private Endpoint resource of Microsoft.Network provider |

329 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/privateLinkResources/read | Gets the available private link resources for the specified instance of the Machine Learning Services Workspace(s) |

330 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/read | Gets the Machine Learning Services Workspace(s) |

331 −> | [Microsoft.Storage](../permissions/storage.md#microsoftstorage)/storageAccounts/privateEndpointConnections/read | Get Private Endpoint Connection |

332 −> | [Microsoft.Storage](../permissions/storage.md#microsoftstorage)/storageAccounts/privateEndpointConnections/write | Put Private Endpoint Connection |

333 −> | [Microsoft.Storage](../permissions/storage.md#microsoftstorage)/storageAccounts/privateLinkResources/read | Get StorageAccount groupids |

334 −> | [Microsoft.Storage](../permissions/storage.md#microsoftstorage)/storageAccounts/read | Returns the list of storage accounts or gets the properties for the specified storage account. |

335 −> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/privateEndpointConnectionsApproval/action | Determines if user is allowed to approve a private endpoint connection |

336 −> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/privateEndpointConnections/read | Returns the list of private endpoint connections or gets the properties for the specified private endpoint connection. |

337 −> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/privateEndpointConnections/write | Approves or rejects an existing private endpoint connection |

338 −> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/privateLinkResources/read | Get the private link resources for the corresponding sql server |

339 −> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/read | Return the list of servers or gets the properties for the specified server. |

340 −> | **NotActions** | |

341 −> | *none* | |

342 −> | **DataActions** | |

343 −> | *none* | |

344 −> | **NotDataActions** | |

345 −> | *none* | |

346 −

347 −```json

348 −{

349 − "assignableScopes": [

350 − "/"

351 − ],

352 − "description": "Can approve private endpoint connections to Azure AI common dependency resources",

353 − "id": "/providers/Microsoft.Authorization/roleDefinitions/b556d68e-0be0-4f35-a333-ad7ee1ce17ea",

354 − "name": "b556d68e-0be0-4f35-a333-ad7ee1ce17ea",

355 − "permissions": [

356 − {

357 − "actions": [

358 − "Microsoft.ContainerRegistry/registries/privateEndpointConnectionsApproval/action",

359 − "Microsoft.ContainerRegistry/registries/privateEndpointConnections/read",

360 − "Microsoft.ContainerRegistry/registries/privateEndpointConnections/write",

361 − "Microsoft.Cache/redis/read",

362 − "Microsoft.Cache/redis/privateEndpointConnections/read",

363 − "Microsoft.Cache/redis/privateEndpointConnections/write",

364 − "Microsoft.Cache/redis/privateLinkResources/read",

365 − "Microsoft.Cache/redis/privateEndpointConnectionsApproval/action",

366 − "Microsoft.Cache/redisEnterprise/read",

367 − "Microsoft.Cache/redisEnterprise/privateEndpointConnections/read",

368 − "Microsoft.Cache/redisEnterprise/privateEndpointConnections/write",

369 − "Microsoft.Cache/redisEnterprise/privateLinkResources/read",

370 − "Microsoft.Cache/redisEnterprise/privateEndpointConnectionsApproval/action",

371 − "Microsoft.CognitiveServices/accounts/read",

372 − "Microsoft.CognitiveServices/accounts/privateEndpointConnections/read",

373 − "Microsoft.CognitiveServices/accounts/privateEndpointConnections/write",

374 − "Microsoft.CognitiveServices/accounts/privateLinkResources/read",

375 − "Microsoft.DocumentDB/databaseAccounts/privateEndpointConnectionsApproval/action",

376 − "Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/read",

377 − "Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/write",

378 − "Microsoft.DocumentDB/databaseAccounts/privateLinkResources/read",

379 − "Microsoft.DocumentDB/databaseAccounts/read",

380 − "Microsoft.KeyVault/vaults/privateEndpointConnectionsApproval/action",

381 − "Microsoft.KeyVault/vaults/privateEndpointConnections/read",

382 − "Microsoft.KeyVault/vaults/privateEndpointConnections/write",

383 − "Microsoft.KeyVault/vaults/privateLinkResources/read",

384 − "Microsoft.KeyVault/vaults/read",

385 − "Microsoft.MachineLearningServices/workspaces/privateEndpointConnectionsApproval/action",

386 − "Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/read",

387 − "Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/write",

388 − "Microsoft.MachineLearningServices/workspaces/privateLinkResources/read",

389 − "Microsoft.MachineLearningServices/workspaces/read",

390 − "Microsoft.Storage/storageAccounts/privateEndpointConnections/read",

391 − "Microsoft.Storage/storageAccounts/privateEndpointConnections/write",

392 − "Microsoft.Storage/storageAccounts/privateLinkResources/read",

393 − "Microsoft.Storage/storageAccounts/read",

394 − "Microsoft.Sql/servers/privateEndpointConnectionsApproval/action",

395 − "Microsoft.Sql/servers/privateEndpointConnections/read",

396 − "Microsoft.Sql/servers/privateEndpointConnections/write",

397 − "Microsoft.Sql/servers/privateLinkResources/read",

398 − "Microsoft.Sql/servers/read"

399 − ],

400 − "notActions": [],

401 − "dataActions": [],

402 − "notDataActions": []

403 − }

404 − ],

405 − "roleName": "Azure AI Enterprise Network Connection Approver",

406 − "roleType": "BuiltInRole",

407 − "type": "Microsoft.Authorization/roleDefinitions"

408 −}

409 −```

410 −

411 −## Azure AI Inference Deployment Operator

412 −

413 −Can perform all actions required to create a resource deployment within a resource group.

414 −

415 −[Learn more](/azure/ai-studio/concepts/rbac-ai-studio)

416 −

417 −> [!div class="mx-tableFixed"]

418 −> | Actions | Description |

419 −> | --- | --- |

420 −> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |

421 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |

422 −> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/AutoscaleSettings/write | Create or update an autoscale setting |

423 −> | **NotActions** | |

424 −> | *none* | |

425 −> | **DataActions** | |

426 −> | *none* | |

427 −> | **NotDataActions** | |

428 −> | *none* | |

429 −

430 −```json

431 −{

432 − "assignableScopes": [

433 − "/"

434 − ],

435 − "description": "Can perform all actions required to create a resource deployment within a resource group.",

436 − "id": "/providers/Microsoft.Authorization/roleDefinitions/3afb7f49-54cb-416e-8c09-6dc049efa503",

437 − "name": "3afb7f49-54cb-416e-8c09-6dc049efa503",

438 − "permissions": [

439 − {

440 − "actions": [

441 − "Microsoft.Authorization/*/read",

442 − "Microsoft.Resources/deployments/*",

443 − "Microsoft.Insights/AutoscaleSettings/write"

444 − ],

445 − "notActions": [],

446 − "dataActions": [],

447 − "notDataActions": []

448 − }

449 − ],

450 − "roleName": "Azure AI Inference Deployment Operator",

451 − "roleType": "BuiltInRole",

452 − "type": "Microsoft.Authorization/roleDefinitions"

453 −}

454 −```

455 −

456 −## AzureML Compute Operator

457 −

458 −Can access and perform CRUD operations on Machine Learning Services managed compute resources (including Notebook VMs).

459 −

460 −[Learn more](/azure/machine-learning/how-to-assign-roles)

461 −

462 −> [!div class="mx-tableFixed"]

463 −> | Actions | Description |

464 −> | --- | --- |

465 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/computes/* | |

466 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/notebooks/vm/* | |

467 −> | **NotActions** | |

468 −> | *none* | |

469 −> | **DataActions** | |

470 −> | *none* | |

471 −> | **NotDataActions** | |

472 −> | *none* | |

473 −

474 −```json

475 −{

476 − "assignableScopes": [

477 − "/"

478 − ],

479 − "description": "Can access and perform CRUD operations on Machine Learning Services managed compute resources (including Notebook VMs).",

480 − "id": "/providers/Microsoft.Authorization/roleDefinitions/e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",

481 − "name": "e503ece1-11d0-4e8e-8e2c-7a6c3bf38815",

482 − "permissions": [

483 − {

484 − "actions": [

485 − "Microsoft.MachineLearningServices/workspaces/computes/*",

486 − "Microsoft.MachineLearningServices/workspaces/notebooks/vm/*"

487 − ],

488 − "notActions": [],

489 − "dataActions": [],

490 − "notDataActions": []

491 − }

492 − ],

493 − "roleName": "AzureML Compute Operator",

494 − "roleType": "BuiltInRole",

495 − "type": "Microsoft.Authorization/roleDefinitions"

496 −}

497 −```

498 −

499 −## AzureML Data Scientist

500 −

501 −Can perform all actions within an Azure Machine Learning workspace, except for creating or deleting compute resources and modifying the workspace itself.

502 −

503 −[Learn more](/azure/machine-learning/how-to-assign-roles)

504 −

505 −> [!div class="mx-tableFixed"]

506 −> | Actions | Description |

507 −> | --- | --- |

508 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/*/read | |

509 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/*/action | |

510 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/*/delete | |

511 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/*/write | |

512 −> | **NotActions** | |

513 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/delete | Deletes the Machine Learning Services Workspace(s) |

514 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/write | Creates or updates a Machine Learning Services Workspace(s) |

515 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/computes/*/write | |

516 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/computes/*/delete | |

517 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/computes/listKeys/action | List secrets for compute resources in Machine Learning Services Workspace |

518 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/listKeys/action | List secrets for a Machine Learning Services Workspace |

519 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/hubs/write | Creates or updates a Machine Learning Services Hub Workspace(s) |

520 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/hubs/delete | Deletes the Machine Learning Services Hub Workspace(s) |

521 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/featurestores/write | Creates or Updates the Machine Learning Services FeatureStore(s) |

522 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/featurestores/delete | Deletes the Machine Learning Services FeatureStore(s) |

523 −> | **DataActions** | |

524 −> | *none* | |

525 −> | **NotDataActions** | |

526 −> | *none* | |

527 −

528 −```json

529 −{

530 − "assignableScopes": [

531 − "/"

532 − ],

533 − "description": "Can perform all actions within an Azure Machine Learning workspace, except for creating or deleting compute resources and modifying the workspace itself.",

534 − "id": "/providers/Microsoft.Authorization/roleDefinitions/f6c7c914-8db3-469d-8ca1-694a8f32e121",

535 − "name": "f6c7c914-8db3-469d-8ca1-694a8f32e121",

536 − "permissions": [

537 − {

538 − "actions": [

539 − "Microsoft.MachineLearningServices/workspaces/*/read",

540 − "Microsoft.MachineLearningServices/workspaces/*/action",

541 − "Microsoft.MachineLearningServices/workspaces/*/delete",

542 − "Microsoft.MachineLearningServices/workspaces/*/write"

543 − ],

544 − "notActions": [

545 − "Microsoft.MachineLearningServices/workspaces/delete",

546 − "Microsoft.MachineLearningServices/workspaces/write",

547 − "Microsoft.MachineLearningServices/workspaces/computes/*/write",

548 − "Microsoft.MachineLearningServices/workspaces/computes/*/delete",

549 − "Microsoft.MachineLearningServices/workspaces/computes/listKeys/action",

550 − "Microsoft.MachineLearningServices/workspaces/listKeys/action",

551 − "Microsoft.MachineLearningServices/workspaces/hubs/write",

552 − "Microsoft.MachineLearningServices/workspaces/hubs/delete",

553 − "Microsoft.MachineLearningServices/workspaces/featurestores/write",

554 − "Microsoft.MachineLearningServices/workspaces/featurestores/delete"

555 − ],

556 − "dataActions": [],

557 − "notDataActions": []

558 − }

559 − ],

560 − "roleName": "AzureML Data Scientist",

561 − "roleType": "BuiltInRole",

562 − "type": "Microsoft.Authorization/roleDefinitions"

563 −}

564 −```

565 −

566 −## AzureML Metrics Writer (preview)

567 −

568 −Lets you write metrics to AzureML workspace

569 −

570 −[Learn more](/azure/machine-learning/concept-endpoints-online-auth)

571 −

572 −> [!div class="mx-tableFixed"]

573 −> | Actions | Description |

574 −> | --- | --- |

575 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/workspaces/metrics/*/write | |

576 −> | **NotActions** | |

577 −> | *none* | |

578 −> | **DataActions** | |

579 −> | *none* | |

580 −> | **NotDataActions** | |

581 −> | *none* | |

582 −

583 −```json

584 −{

585 − "assignableScopes": [

586 − "/"

587 − ],

588 − "description": "Lets you write metrics to AzureML workspace",

589 − "id": "/providers/Microsoft.Authorization/roleDefinitions/635dd51f-9968-44d3-b7fb-6d9a6bd613ae",

590 − "name": "635dd51f-9968-44d3-b7fb-6d9a6bd613ae",

591 − "permissions": [

592 − {

593 − "actions": [

594 − "Microsoft.MachineLearningServices/workspaces/metrics/*/write"

595 − ],

596 − "notActions": [],

597 − "dataActions": [],

598 − "notDataActions": []

599 − }

600 − ],

601 − "roleName": "AzureML Metrics Writer (preview)",

602 − "roleType": "BuiltInRole",

603 − "type": "Microsoft.Authorization/roleDefinitions"

604 −}

605 −```

606 −

607 −## AzureML Registry User

608 −

609 −Can perform all actions on Machine Learning Services Registry assets as well as get Registry resources.

610 −

611 −[Learn more](/azure/machine-learning/how-to-assign-roles)

612 −

613 −> [!div class="mx-tableFixed"]

614 −> | Actions | Description |

615 −> | --- | --- |

616 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/registries/read | Gets the Machine Learning Services registry(ies) |

617 −> | [Microsoft.MachineLearningServices](../permissions/ai-machine-learning.md#microsoftmachinelearningservices)/registries/assets/* | |

618 −> | **NotActions** | |

619 −> | *none* | |

620 −> | **DataActions** | |

621 −> | *none* | |

622 −> | **NotDataActions** | |

623 −> | *none* | |

624 −

625 −```json

626 −{

627 − "assignableScopes": [

628 − "/"

629 − ],

630 − "description": "Can perform all actions on Machine Learning Services Registry assets as well as get Registry resources.",

631 − "id": "/providers/Microsoft.Authorization/roleDefinitions/1823dd4f-9b8c-4ab6-ab4e-7397a3684615",

632 − "name": "1823dd4f-9b8c-4ab6-ab4e-7397a3684615",

633 − "permissions": [

634 − {

635 − "actions": [

636 − "Microsoft.MachineLearningServices/registries/read",

637 − "Microsoft.MachineLearningServices/registries/assets/*"

638 − ],

639 − "notActions": [],

640 − "dataActions": [],

641 − "notDataActions": []

642 − }

643 − ],

644 − "roleName": "AzureML Registry User",

645 − "roleType": "BuiltInRole",

646 − "type": "Microsoft.Authorization/roleDefinitions"

647 −}

648 −```

649 −

650 −## Cognitive Services Contributor

651 −

652 −Lets you create, read, update, delete and manage keys of Cognitive Services.

653 −

654 −[Learn more](/azure/ai-services/openai/how-to/role-based-access-control)

655 −

656 −> [!div class="mx-tableFixed"]

657 −> | Actions | Description |

658 −> | --- | --- |

659 −> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |

660 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/* | |

661 −> | [Microsoft.Features](../permissions/management-and-governance.md#microsoftfeatures)/features/read | Gets the features of a subscription. |

662 −> | [Microsoft.Features](../permissions/management-and-governance.md#microsoftfeatures)/providers/features/read | Gets the feature of a subscription in a given resource provider. |

663 −> | [Microsoft.Features](../permissions/management-and-governance.md#microsoftfeatures)/providers/features/register/action | Registers the feature for a subscription in a given resource provider. |

664 −> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |

665 −> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/diagnosticSettings/* | Creates, updates, or reads the diagnostic setting for Analysis Server |

666 −> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/logDefinitions/read | Read log definitions |

667 −> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/metricdefinitions/read | Read metric definitions |

668 −> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/metrics/read | Read metrics |

669 −> | [Microsoft.ResourceHealth](../permissions/management-and-governance.md#microsoftresourcehealth)/availabilityStatuses/read | Gets the availability statuses for all resources in the specified scope |

670 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |

671 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/operations/read | Gets or lists deployment operations. |

672 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/operationresults/read | Get the subscription operation results. |

673 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/read | Gets the list of subscriptions. |

674 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourcegroups/deployments/* | |

675 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |

676 −> | [Microsoft.Support](../permissions/general.md#microsoftsupport)/* | Create and update a support ticket |

677 −> | **NotActions** | |

678 −> | *none* | |

679 −> | **DataActions** | |

680 −> | *none* | |

681 −> | **NotDataActions** | |

682 −> | *none* | |

683 −

684 −```json

685 −{

686 − "assignableScopes": [

687 − "/"

688 − ],

689 − "description": "Lets you create, read, update, delete and manage keys of Cognitive Services.",

690 − "id": "/providers/Microsoft.Authorization/roleDefinitions/25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",

691 − "name": "25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68",

692 − "permissions": [

693 − {

694 − "actions": [

695 − "Microsoft.Authorization/*/read",

696 − "Microsoft.CognitiveServices/*",

697 − "Microsoft.Features/features/read",

698 − "Microsoft.Features/providers/features/read",

699 − "Microsoft.Features/providers/features/register/action",

700 − "Microsoft.Insights/alertRules/*",

701 − "Microsoft.Insights/diagnosticSettings/*",

702 − "Microsoft.Insights/logDefinitions/read",

703 − "Microsoft.Insights/metricdefinitions/read",

704 − "Microsoft.Insights/metrics/read",

705 − "Microsoft.ResourceHealth/availabilityStatuses/read",

706 − "Microsoft.Resources/deployments/*",

707 − "Microsoft.Resources/deployments/operations/read",

708 − "Microsoft.Resources/subscriptions/operationresults/read",

709 − "Microsoft.Resources/subscriptions/read",

710 − "Microsoft.Resources/subscriptions/resourcegroups/deployments/*",

711 − "Microsoft.Resources/subscriptions/resourceGroups/read",

712 − "Microsoft.Support/*"

713 − ],

714 − "notActions": [],

715 − "dataActions": [],

716 − "notDataActions": []

717 − }

718 − ],

719 − "roleName": "Cognitive Services Contributor",

720 − "roleType": "BuiltInRole",

721 − "type": "Microsoft.Authorization/roleDefinitions"

722 −}

723 −```

724 −

725 −## Cognitive Services Custom Vision Contributor

726 −

727 −Full access to the project, including the ability to view, create, edit, or delete projects.

728 −

729 −[Learn more](/azure/ai-services/custom-vision-service/role-based-access-control)

730 −

731 −> [!div class="mx-tableFixed"]

732 −> | Actions | Description |

733 −> | --- | --- |

734 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/*/read | |

735 −> | **NotActions** | |

736 −> | *none* | |

737 −> | **DataActions** | |

738 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/* | |

739 −> | **NotDataActions** | |

740 −> | *none* | |

741 −

742 −```json

743 −{

744 − "assignableScopes": [

745 − "/"

746 − ],

747 − "description": "Full access to the project, including the ability to view, create, edit, or delete projects.",

748 − "id": "/providers/Microsoft.Authorization/roleDefinitions/c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",

749 − "name": "c1ff6cc2-c111-46fe-8896-e0ef812ad9f3",

750 − "permissions": [

751 − {

752 − "actions": [

753 − "Microsoft.CognitiveServices/*/read"

754 − ],

755 − "notActions": [],

756 − "dataActions": [

757 − "Microsoft.CognitiveServices/accounts/CustomVision/*"

758 − ],

759 − "notDataActions": []

760 − }

761 − ],

762 − "roleName": "Cognitive Services Custom Vision Contributor",

763 − "roleType": "BuiltInRole",

764 − "type": "Microsoft.Authorization/roleDefinitions"

765 −}

766 −```

767 −

768 −## Cognitive Services Custom Vision Deployment

769 −

770 −Publish, unpublish or export models. Deployment can view the project but can't update.

771 −

772 −[Learn more](/azure/ai-services/custom-vision-service/role-based-access-control)

773 −

774 −> [!div class="mx-tableFixed"]

775 −> | Actions | Description |

776 −> | --- | --- |

777 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/*/read | |

778 −> | **NotActions** | |

779 −> | *none* | |

780 −> | **DataActions** | |

781 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/*/read | |

782 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/projects/predictions/* | |

783 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/projects/iterations/publish/* | |

784 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/projects/iterations/export/* | |

785 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/projects/quicktest/* | |

786 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/classify/* | |

787 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/detect/* | |

788 −> | **NotDataActions** | |

789 −> | [Microsoft.CognitiveServices](../permissions/ai-machine-learning.md#microsoftcognitiveservices)/accounts/CustomVision/projects/export/read | Exports a project. |

790 −

791 −```json

792 −{

793 − "assignableScopes": [

794 − "/"

795 − ],

796 − "description": "Publish, unpublish or export models. Deployment can view the project but can't update.",

797 − "id": "/providers/Microsoft.Authorization/roleDefinitions/5c4089e1-6d96-4d2f-b296-c1bc7137275f",

798 − "name": "5c4089e1-6d96-4d2f-b296-c1bc7137275f",

799 − "permissions": [

800 − {

801 − "actions": [

802 − "Microsoft.CognitiveServices/*/read"

803 − ],

804 − "notActions": [],

805 − "dataActions": [

Azure built-in roles · ai machine learning

Microsoft's edit · 27 Apr 2025 19:49 UTC