Azure built-in roles · compute
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit cdbc75d · +213 −0 lines · also on GitHub
⋯ 165 unchanged lines
166166
"type": "Microsoft.Authorization/roleDefinitions"
167167
}
168168
```
169
+## Azure Batch Account Contributor
170
+
171
+Grants full access to manage all Batch resources, including Batch accounts, pools and jobs.
172
+
173
+[Learn more](/azure/batch/batch-role-based-access-control)
174
+
175
+> [!div class="mx-tableFixed"]
176
+> | Actions | Description |
177
+> | --- | --- |
178
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
179
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/* | |
180
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
181
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
182
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
183
+> | **NotActions** | |
184
+> | *none* | |
185
+> | **DataActions** | |
186
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/* | |
187
+> | **NotDataActions** | |
188
+> | *none* | |
189
+
190
+```json
191
+{
192
+ "assignableScopes": [
193
+ "/"
194
+ ],
195
+ "description": "Grants full access to manage all Batch resources, including Batch accounts, pools and jobs.",
196
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/29fe4964-1e60-436b-bd3a-77fd4c178b3c",
197
+ "name": "29fe4964-1e60-436b-bd3a-77fd4c178b3c",
198
+ "permissions": [
199
+ {
200
+ "actions": [
201
+ "Microsoft.Authorization/*/read",
202
+ "Microsoft.Batch/*",
203
+ "Microsoft.Insights/alertRules/*",
204
+ "Microsoft.Resources/deployments/*",
205
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
206
+ ],
207
+ "notActions": [],
208
+ "dataActions": [
209
+ "Microsoft.Batch/*"
210
+ ],
211
+ "notDataActions": []
212
+ }
213
+ ],
214
+ "roleName": "Azure Batch Account Contributor",
215
+ "roleType": "BuiltInRole",
216
+ "type": "Microsoft.Authorization/roleDefinitions"
217
+}
218
+```
219
+
220
+## Azure Batch Account Reader
221
+
222
+Lets you view all resources including pools and jobs in the Batch account.
223
+
224
+[Learn more](/azure/batch/batch-role-based-access-control)
225
+
226
+> [!div class="mx-tableFixed"]
227
+> | Actions | Description |
228
+> | --- | --- |
229
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/*/read | |
230
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
231
+> | **NotActions** | |
232
+> | *none* | |
233
+> | **DataActions** | |
234
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/*/read | |
235
+> | **NotDataActions** | |
236
+> | *none* | |
237
+
238
+```json
239
+{
240
+ "assignableScopes": [
241
+ "/"
242
+ ],
243
+ "description": "Lets you view all resources including pools and jobs in the Batch account.",
244
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/11076f67-66f6-4be0-8f6b-f0609fd05cc9",
245
+ "name": "11076f67-66f6-4be0-8f6b-f0609fd05cc9",
246
+ "permissions": [
247
+ {
248
+ "actions": [
249
+ "Microsoft.Batch/*/read",
250
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
251
+ ],
252
+ "notActions": [],
253
+ "dataActions": [
254
+ "Microsoft.Batch/*/read"
255
+ ],
256
+ "notDataActions": []
257
+ }
258
+ ],
259
+ "roleName": "Azure Batch Account Reader",
260
+ "roleType": "BuiltInRole",
261
+ "type": "Microsoft.Authorization/roleDefinitions"
262
+}
263
+```
264
+
265
+## Azure Batch Data Contributor
266
+
267
+Grants permissions to manage Batch pools and jobs but not to modify accounts.
268
+
269
+[Learn more](/azure/batch/batch-role-based-access-control)
270
+
271
+> [!div class="mx-tableFixed"]
272
+> | Actions | Description |
273
+> | --- | --- |
274
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
275
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/read | Lists Batch accounts or gets the properties of a Batch account |
276
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/applications/* | |
277
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/certificates/* | |
278
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/certificateOperationResults/* | |
279
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/pools/* | |
280
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/poolOperationResults/* | |
281
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/locations/*/read | |
282
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
283
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
284
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
285
+> | **NotActions** | |
286
+> | *none* | |
287
+> | **DataActions** | |
288
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/jobSchedules/* | |
289
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/jobs/* | |
290
+> | **NotDataActions** | |
291
+> | *none* | |
292
+
293
+```json
294
+{
295
+ "assignableScopes": [
296
+ "/"
297
+ ],
298
+ "description": "Grants permissions to manage Batch pools and jobs but not to modify accounts.",
299
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/6aaa78f1-f7de-44ca-8722-c64a23943cae",
300
+ "name": "6aaa78f1-f7de-44ca-8722-c64a23943cae",
301
+ "permissions": [
302
+ {
303
+ "actions": [
304
+ "Microsoft.Authorization/*/read",
305
+ "Microsoft.Batch/batchAccounts/read",
306
+ "Microsoft.Batch/batchAccounts/applications/*",
307
+ "Microsoft.Batch/batchAccounts/certificates/*",
308
+ "Microsoft.Batch/batchAccounts/certificateOperationResults/*",
309
+ "Microsoft.Batch/batchAccounts/pools/*",
310
+ "Microsoft.Batch/batchAccounts/poolOperationResults/*",
311
+ "Microsoft.Batch/locations/*/read",
312
+ "Microsoft.Insights/alertRules/*",
313
+ "Microsoft.Resources/deployments/*",
314
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
315
+ ],
316
+ "notActions": [],
317
+ "dataActions": [
318
+ "Microsoft.Batch/batchAccounts/jobSchedules/*",
319
+ "Microsoft.Batch/batchAccounts/jobs/*"
320
+ ],
321
+ "notDataActions": []
322
+ }
323
+ ],
324
+ "roleName": "Azure Batch Data Contributor",
325
+ "roleType": "BuiltInRole",
326
+ "type": "Microsoft.Authorization/roleDefinitions"
327
+}
328
+```
329
+
330
+## Azure Batch Job Submitter
331
+
332
+Lets you submit and manage jobs in the Batch account.
333
+
334
+[Learn more](/azure/batch/batch-role-based-access-control)
335
+
336
+> [!div class="mx-tableFixed"]
337
+> | Actions | Description |
338
+> | --- | --- |
339
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/applications/read | Lists applications or gets the properties of an application |
340
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/applications/versions/read | Gets the properties of an application package |
341
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/pools/read | Lists pools on a Batch account or gets the properties of a pool |
342
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
343
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
344
+> | **NotActions** | |
345
+> | *none* | |
346
+> | **DataActions** | |
347
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/jobSchedules/* | |
348
+> | [Microsoft.Batch](../permissions/compute.md#microsoftbatch)/batchAccounts/jobs/* | |
349
+> | **NotDataActions** | |
350
+> | *none* | |
351
+
352
+```json
353
+{
354
+ "assignableScopes": [
355
+ "/"
356
+ ],
357
+ "description": "Lets you submit and manage jobs in the Batch account.",
358
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/48e5e92e-a480-4e71-aa9c-2778f4c13781",
359
+ "name": "48e5e92e-a480-4e71-aa9c-2778f4c13781",
360
+ "permissions": [
361
+ {
362
+ "actions": [
363
+ "Microsoft.Batch/batchAccounts/applications/read",
364
+ "Microsoft.Batch/batchAccounts/applications/versions/read",
365
+ "Microsoft.Batch/batchAccounts/pools/read",
366
+ "Microsoft.Insights/alertRules/*",
367
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
368
+ ],
369
+ "notActions": [],
370
+ "dataActions": [
371
+ "Microsoft.Batch/batchAccounts/jobSchedules/*",
372
+ "Microsoft.Batch/batchAccounts/jobs/*"
373
+ ],
374
+ "notDataActions": []
375
+ }
376
+ ],
377
+ "roleName": "Azure Batch Job Submitter",
378
+ "roleType": "BuiltInRole",
379
+ "type": "Microsoft.Authorization/roleDefinitions"
380
+}
381
+```
169382
170383
## Classic Virtual Machine Contributor
171384
⋯ 2215 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.