Azure built-in roles · containers
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 2eb873c · +619 −0 lines · also on GitHub
⋯ 2759 unchanged lines
27602760
}
27612761
```
27622762
2763
+## Container Apps ConnectedEnvironments Contributor
2764
+
2765
+Full management of Container Apps ConnectedEnvironments, including creation, deletion, and updates.
2766
+
2767
+> [!div class="mx-tableFixed"]
2768
+> | Actions | Description |
2769
+> | --- | --- |
2770
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
2771
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
2772
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/* | |
2773
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/read | |
2774
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/write | |
2775
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/delete | |
2776
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/action | |
2777
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/daprComponents/listSecrets/action | List Secrets of a Dapr Component |
2778
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
2779
+> | **NotActions** | |
2780
+> | *none* | |
2781
+> | **DataActions** | |
2782
+> | *none* | |
2783
+> | **NotDataActions** | |
2784
+> | *none* | |
2785
+
2786
+```json
2787
+{
2788
+ "assignableScopes": [
2789
+ "/"
2790
+ ],
2791
+ "description": "Full management of Container Apps ConnectedEnvironments, including creation, deletion, and updates.",
2792
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/6f4fe6fc-f04f-4d97-8528-8bc18c848dca",
2793
+ "name": "6f4fe6fc-f04f-4d97-8528-8bc18c848dca",
2794
+ "permissions": [
2795
+ {
2796
+ "actions": [
2797
+ "Microsoft.Authorization/*/read",
2798
+ "Microsoft.Insights/alertRules/*",
2799
+ "Microsoft.App/connectedEnvironments/*",
2800
+ "Microsoft.App/connectedEnvironments/*/read",
2801
+ "Microsoft.App/connectedEnvironments/*/write",
2802
+ "Microsoft.App/connectedEnvironments/*/delete",
2803
+ "Microsoft.App/connectedEnvironments/*/action",
2804
+ "Microsoft.App/connectedEnvironments/daprComponents/listSecrets/action",
2805
+ "Microsoft.Resources/deployments/*"
2806
+ ],
2807
+ "notActions": [],
2808
+ "dataActions": [],
2809
+ "notDataActions": []
2810
+ }
2811
+ ],
2812
+ "roleName": "Container Apps ConnectedEnvironments Contributor",
2813
+ "roleType": "BuiltInRole",
2814
+ "type": "Microsoft.Authorization/roleDefinitions"
2815
+}
2816
+```
2817
+
2818
+## Container Apps ConnectedEnvironments Reader
2819
+
2820
+Read access to Container Apps ConnectedEnvironments.
2821
+
2822
+> [!div class="mx-tableFixed"]
2823
+> | Actions | Description |
2824
+> | --- | --- |
2825
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
2826
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
2827
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
2828
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/read | Get a Connected Environment |
2829
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/read | |
2830
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
2831
+> | **NotActions** | |
2832
+> | *none* | |
2833
+> | **DataActions** | |
2834
+> | *none* | |
2835
+> | **NotDataActions** | |
2836
+> | *none* | |
2837
+
2838
+```json
2839
+{
2840
+ "assignableScopes": [
2841
+ "/"
2842
+ ],
2843
+ "description": "Read access to Container Apps ConnectedEnvironments.",
2844
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/d5adeb5b-107f-4aca-99ea-4e3f4fc008d5",
2845
+ "name": "d5adeb5b-107f-4aca-99ea-4e3f4fc008d5",
2846
+ "permissions": [
2847
+ {
2848
+ "actions": [
2849
+ "Microsoft.Authorization/*/read",
2850
+ "Microsoft.Insights/alertRules/*",
2851
+ "Microsoft.Resources/deployments/*",
2852
+ "Microsoft.App/connectedEnvironments/read",
2853
+ "Microsoft.App/connectedEnvironments/*/read",
2854
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
2855
+ ],
2856
+ "notActions": [],
2857
+ "dataActions": [],
2858
+ "notDataActions": []
2859
+ }
2860
+ ],
2861
+ "roleName": "Container Apps ConnectedEnvironments Reader",
2862
+ "roleType": "BuiltInRole",
2863
+ "type": "Microsoft.Authorization/roleDefinitions"
2864
+}
2865
+```
2866
+
2867
+## Container Apps Contributor
2868
+
2869
+Full management of Container Apps, including creation, deletion, and updates.
2870
+
2871
+> [!div class="mx-tableFixed"]
2872
+> | Actions | Description |
2873
+> | --- | --- |
2874
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
2875
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
2876
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/*/read | |
2877
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/*/write | |
2878
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/*/delete | |
2879
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/*/action | |
2880
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/read | Get a Managed Environment |
2881
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/*/read | |
2882
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/join/action | Allows to create a Container App in a Managed Environment |
2883
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/checknameavailability/action | Check reource name availability for a Managed Environment |
2884
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/read | Get a Connected Environment |
2885
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/read | |
2886
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/join/action | Allows to create a Container App or Container Apps Job in a Connected Environment |
2887
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/checknameavailability/action | Check reource name availability for a Connected Environment |
2888
+> | **NotActions** | |
2889
+> | *none* | |
2890
+> | **DataActions** | |
2891
+> | *none* | |
2892
+> | **NotDataActions** | |
2893
+> | *none* | |
2894
+
2895
+```json
2896
+{
2897
+ "assignableScopes": [
2898
+ "/"
2899
+ ],
2900
+ "description": "Full management of Container Apps, including creation, deletion, and updates.",
2901
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/358470bc-b998-42bd-ab17-a7e34c199c0f",
2902
+ "name": "358470bc-b998-42bd-ab17-a7e34c199c0f",
2903
+ "permissions": [
2904
+ {
2905
+ "actions": [
2906
+ "Microsoft.Authorization/*/read",
2907
+ "Microsoft.Insights/alertRules/*",
2908
+ "Microsoft.App/containerApps/*/read",
2909
+ "Microsoft.App/containerApps/*/write",
2910
+ "Microsoft.App/containerApps/*/delete",
2911
+ "Microsoft.App/containerApps/*/action",
2912
+ "Microsoft.App/managedEnvironments/read",
2913
+ "Microsoft.App/managedEnvironments/*/read",
2914
+ "Microsoft.App/managedEnvironments/join/action",
2915
+ "Microsoft.App/managedEnvironments/checknameavailability/action",
2916
+ "Microsoft.App/connectedEnvironments/read",
2917
+ "Microsoft.App/connectedEnvironments/*/read",
2918
+ "Microsoft.App/connectedEnvironments/join/action",
2919
+ "Microsoft.App/connectedEnvironments/checknameavailability/action"
2920
+ ],
2921
+ "notActions": [],
2922
+ "dataActions": [],
2923
+ "notDataActions": []
2924
+ }
2925
+ ],
2926
+ "roleName": "Container Apps Contributor",
2927
+ "roleType": "BuiltInRole",
2928
+ "type": "Microsoft.Authorization/roleDefinitions"
2929
+}
2930
+```
2931
+
2932
+## Container Apps Jobs Contributor
2933
+
2934
+Full management of Container Apps jobs, including creation, deletion, and updates.
2935
+
2936
+> [!div class="mx-tableFixed"]
2937
+> | Actions | Description |
2938
+> | --- | --- |
2939
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
2940
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
2941
+> | [microsoft.app](../permissions/compute.md#microsoftapp)/jobs/read | Get a Container Apps Job |
2942
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/*/read | |
2943
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/*/action | |
2944
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/write | Create or update a Container Apps Job |
2945
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/delete | Delete a Container Apps Job |
2946
+> | [Microsoft.app](../permissions/compute.md#microsoftapp)/managedenvironments/read | Get a Managed Environment |
2947
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedenvironments/*/read | |
2948
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedenvironments/join/action | Allows to create a Container App in a Managed Environment |
2949
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedenvironments/checknameavailability/action | Check reource name availability for a Managed Environment |
2950
+> | [Microsoft.app](../permissions/compute.md#microsoftapp)/connectedEnvironments/read | Get a Connected Environment |
2951
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/read | |
2952
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/join/action | Allows to create a Container App or Container Apps Job in a Connected Environment |
2953
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/checknameavailability/action | Check reource name availability for a Connected Environment |
2954
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
2955
+> | **NotActions** | |
2956
+> | *none* | |
2957
+> | **DataActions** | |
2958
+> | *none* | |
2959
+> | **NotDataActions** | |
2960
+> | *none* | |
2961
+
2962
+```json
2963
+{
2964
+ "assignableScopes": [
2965
+ "/"
2966
+ ],
2967
+ "description": "Full management of Container Apps jobs, including creation, deletion, and updates.",
2968
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/4e3d2b60-56ae-4dc6-a233-09c8e5a82e68",
2969
+ "name": "4e3d2b60-56ae-4dc6-a233-09c8e5a82e68",
2970
+ "permissions": [
2971
+ {
2972
+ "actions": [
2973
+ "Microsoft.Authorization/*/read",
2974
+ "Microsoft.Insights/alertRules/*",
2975
+ "microsoft.app/jobs/read",
2976
+ "Microsoft.App/jobs/*/read",
2977
+ "Microsoft.App/jobs/*/action",
2978
+ "Microsoft.App/jobs/write",
2979
+ "Microsoft.App/jobs/delete",
2980
+ "Microsoft.app/managedenvironments/read",
2981
+ "Microsoft.App/managedenvironments/*/read",
2982
+ "Microsoft.App/managedenvironments/join/action",
2983
+ "Microsoft.App/managedenvironments/checknameavailability/action",
2984
+ "Microsoft.app/connectedEnvironments/read",
2985
+ "Microsoft.App/connectedEnvironments/*/read",
2986
+ "Microsoft.App/connectedEnvironments/join/action",
2987
+ "Microsoft.App/connectedEnvironments/checknameavailability/action",
2988
+ "Microsoft.Resources/deployments/*"
2989
+ ],
2990
+ "notActions": [],
2991
+ "dataActions": [],
2992
+ "notDataActions": []
2993
+ }
2994
+ ],
2995
+ "roleName": "Container Apps Jobs Contributor",
2996
+ "roleType": "BuiltInRole",
2997
+ "type": "Microsoft.Authorization/roleDefinitions"
2998
+}
2999
+```
3000
+
3001
+## Container Apps Jobs Operator
3002
+
3003
+Read, start, and stop Container Apps jobs.
3004
+
3005
+> [!div class="mx-tableFixed"]
3006
+> | Actions | Description |
3007
+> | --- | --- |
3008
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
3009
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
3010
+> | [microsoft.app](../permissions/compute.md#microsoftapp)/jobs/read | Get a Container Apps Job |
3011
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/*/read | |
3012
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/*/action | |
3013
+> | [Microsoft.app](../permissions/compute.md#microsoftapp)/managedenvironments/read | Get a Managed Environment |
3014
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedenvironments/*/read | |
3015
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedenvironments/join/action | Allows to create a Container App in a Managed Environment |
3016
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedenvironments/checknameavailability/action | Check reource name availability for a Managed Environment |
3017
+> | [Microsoft.app](../permissions/compute.md#microsoftapp)/connectedEnvironments/read | Get a Connected Environment |
3018
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/read | |
3019
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/join/action | Allows to create a Container App or Container Apps Job in a Connected Environment |
3020
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/checknameavailability/action | Check reource name availability for a Connected Environment |
3021
+> | **NotActions** | |
3022
+> | *none* | |
3023
+> | **DataActions** | |
3024
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/logstream/action | View log stream of a container app job |
3025
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/exec/action | Connect to console of a container app job |
3026
+> | **NotDataActions** | |
3027
+> | *none* | |
3028
+
3029
+```json
3030
+{
3031
+ "assignableScopes": [
3032
+ "/"
3033
+ ],
3034
+ "description": "Read, start, and stop Container Apps jobs.",
3035
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/b9a307c4-5aa3-4b52-ba60-2b17c136cd7b",
3036
+ "name": "b9a307c4-5aa3-4b52-ba60-2b17c136cd7b",
3037
+ "permissions": [
3038
+ {
3039
+ "actions": [
3040
+ "Microsoft.Authorization/*/read",
3041
+ "Microsoft.Insights/alertRules/*",
3042
+ "microsoft.app/jobs/read",
3043
+ "Microsoft.App/jobs/*/read",
3044
+ "Microsoft.App/jobs/*/action",
3045
+ "Microsoft.app/managedenvironments/read",
3046
+ "Microsoft.App/managedenvironments/*/read",
3047
+ "Microsoft.App/managedenvironments/join/action",
3048
+ "Microsoft.App/managedenvironments/checknameavailability/action",
3049
+ "Microsoft.app/connectedEnvironments/read",
3050
+ "Microsoft.App/connectedEnvironments/*/read",
3051
+ "Microsoft.App/connectedEnvironments/join/action",
3052
+ "Microsoft.App/connectedEnvironments/checknameavailability/action"
3053
+ ],
3054
+ "notActions": [],
3055
+ "dataActions": [
3056
+ "Microsoft.App/jobs/logstream/action",
3057
+ "Microsoft.App/jobs/exec/action"
3058
+ ],
3059
+ "notDataActions": []
3060
+ }
3061
+ ],
3062
+ "roleName": "Container Apps Jobs Operator",
3063
+ "roleType": "BuiltInRole",
3064
+ "type": "Microsoft.Authorization/roleDefinitions"
3065
+}
3066
+```
3067
+
3068
+## Container Apps Jobs Reader
3069
+
3070
+Read access to ContainerApps jobs
3071
+
3072
+> [!div class="mx-tableFixed"]
3073
+> | Actions | Description |
3074
+> | --- | --- |
3075
+> | [microsoft.app](../permissions/compute.md#microsoftapp)/jobs/read | Get a Container Apps Job |
3076
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/jobs/*/read | |
3077
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedenvironments/read | Get a Managed Environment |
3078
+> | **NotActions** | |
3079
+> | *none* | |
3080
+> | **DataActions** | |
3081
+> | *none* | |
3082
+> | **NotDataActions** | |
3083
+> | *none* | |
3084
+
3085
+```json
3086
+{
3087
+ "assignableScopes": [
3088
+ "/"
3089
+ ],
3090
+ "description": "Read access to ContainerApps jobs",
3091
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/edd66693-d32a-450b-997d-0158c03976b0",
3092
+ "name": "edd66693-d32a-450b-997d-0158c03976b0",
3093
+ "permissions": [
3094
+ {
3095
+ "actions": [
3096
+ "microsoft.app/jobs/read",
3097
+ "Microsoft.App/jobs/*/read",
3098
+ "Microsoft.App/managedenvironments/read"
3099
+ ],
3100
+ "notActions": [],
3101
+ "dataActions": [],
3102
+ "notDataActions": []
3103
+ }
3104
+ ],
3105
+ "roleName": "Container Apps Jobs Reader",
3106
+ "roleType": "BuiltInRole",
3107
+ "type": "Microsoft.Authorization/roleDefinitions"
3108
+}
3109
+```
3110
+
3111
+## Container Apps ManagedEnvironments Contributor
3112
+
3113
+Full management of Container Apps ManagedEnvironments, including creation, deletion, and updates.
3114
+
3115
+> [!div class="mx-tableFixed"]
3116
+> | Actions | Description |
3117
+> | --- | --- |
3118
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
3119
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
3120
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/*/read | |
3121
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/*/write | |
3122
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/*/delete | |
3123
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/*/action | |
3124
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
3125
+> | **NotActions** | |
3126
+> | *none* | |
3127
+> | **DataActions** | |
3128
+> | *none* | |
3129
+> | **NotDataActions** | |
3130
+> | *none* | |
3131
+
3132
+```json
3133
+{
3134
+ "assignableScopes": [
3135
+ "/"
3136
+ ],
3137
+ "description": "Full management of Container Apps ManagedEnvironments, including creation, deletion, and updates.",
3138
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/57cc5028-e6a7-4284-868d-0611c5923f8d",
3139
+ "name": "57cc5028-e6a7-4284-868d-0611c5923f8d",
3140
+ "permissions": [
3141
+ {
3142
+ "actions": [
3143
+ "Microsoft.Authorization/*/read",
3144
+ "Microsoft.Insights/alertRules/*",
3145
+ "Microsoft.App/managedEnvironments/*/read",
3146
+ "Microsoft.App/managedEnvironments/*/write",
3147
+ "Microsoft.App/managedEnvironments/*/delete",
3148
+ "Microsoft.App/managedEnvironments/*/action",
3149
+ "Microsoft.Resources/deployments/*"
3150
+ ],
3151
+ "notActions": [],
3152
+ "dataActions": [],
3153
+ "notDataActions": []
3154
+ }
3155
+ ],
3156
+ "roleName": "Container Apps ManagedEnvironments Contributor",
3157
+ "roleType": "BuiltInRole",
3158
+ "type": "Microsoft.Authorization/roleDefinitions"
3159
+}
3160
+```
3161
+
3162
+## Container Apps ManagedEnvironments Reader
3163
+
3164
+Read access to ContainerApps managedenvironments.
3165
+
3166
+> [!div class="mx-tableFixed"]
3167
+> | Actions | Description |
3168
+> | --- | --- |
3169
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
3170
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
3171
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/*/read | |
3172
+> | **NotActions** | |
3173
+> | *none* | |
3174
+> | **DataActions** | |
3175
+> | *none* | |
3176
+> | **NotDataActions** | |
3177
+> | *none* | |
3178
+
3179
+```json
3180
+{
3181
+ "assignableScopes": [
3182
+ "/"
3183
+ ],
3184
+ "description": "Read access to ContainerApps managedenvironments.",
3185
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/1b32c00b-7eff-4c22-93e6-93d11d72d2d8",
3186
+ "name": "1b32c00b-7eff-4c22-93e6-93d11d72d2d8",
3187
+ "permissions": [
3188
+ {
3189
+ "actions": [
3190
+ "Microsoft.Authorization/*/read",
3191
+ "Microsoft.Insights/alertRules/*",
3192
+ "Microsoft.App/managedEnvironments/*/read"
3193
+ ],
3194
+ "notActions": [],
3195
+ "dataActions": [],
3196
+ "notDataActions": []
3197
+ }
3198
+ ],
3199
+ "roleName": "Container Apps ManagedEnvironments Reader",
3200
+ "roleType": "BuiltInRole",
3201
+ "type": "Microsoft.Authorization/roleDefinitions"
3202
+}
3203
+```
3204
+
3205
+## Container Apps Operator
3206
+
3207
+Read, logstream and exec into Container Apps.
3208
+
3209
+> [!div class="mx-tableFixed"]
3210
+> | Actions | Description |
3211
+> | --- | --- |
3212
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
3213
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
3214
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/*/read | |
3215
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/*/action | |
3216
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/read | Get a Managed Environment |
3217
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/*/read | |
3218
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/join/action | Allows to create a Container App in a Managed Environment |
3219
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/checknameavailability/action | Check reource name availability for a Managed Environment |
3220
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/read | Get a Connected Environment |
3221
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/read | |
3222
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/join/action | Allows to create a Container App or Container Apps Job in a Connected Environment |
3223
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/checknameavailability/action | Check reource name availability for a Connected Environment |
3224
+> | **NotActions** | |
3225
+> | *none* | |
3226
+> | **DataActions** | |
3227
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/logstream/action | View log stream of a container app |
3228
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/exec/action | Connect to console of a container app |
3229
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/containerApps/debug/action | Connect to debug console of a container app |
3230
+> | **NotDataActions** | |
3231
+> | *none* | |
3232
+
3233
+```json
3234
+{
3235
+ "assignableScopes": [
3236
+ "/"
3237
+ ],
3238
+ "description": "Read, logstream and exec into Container Apps.",
3239
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/f3bd1b5c-91fa-40e7-afe7-0c11d331232c",
3240
+ "name": "f3bd1b5c-91fa-40e7-afe7-0c11d331232c",
3241
+ "permissions": [
3242
+ {
3243
+ "actions": [
3244
+ "Microsoft.Authorization/*/read",
3245
+ "Microsoft.Insights/alertRules/*",
3246
+ "Microsoft.App/containerApps/*/read",
3247
+ "Microsoft.App/containerApps/*/action",
3248
+ "Microsoft.App/managedEnvironments/read",
3249
+ "Microsoft.App/managedEnvironments/*/read",
3250
+ "Microsoft.App/managedEnvironments/join/action",
3251
+ "Microsoft.App/managedEnvironments/checknameavailability/action",
3252
+ "Microsoft.App/connectedEnvironments/read",
3253
+ "Microsoft.App/connectedEnvironments/*/read",
3254
+ "Microsoft.App/connectedEnvironments/join/action",
3255
+ "Microsoft.App/connectedEnvironments/checknameavailability/action"
3256
+ ],
3257
+ "notActions": [],
3258
+ "dataActions": [
3259
+ "Microsoft.App/containerApps/logstream/action",
3260
+ "Microsoft.App/containerApps/exec/action",
3261
+ "Microsoft.App/containerApps/debug/action"
3262
+ ],
3263
+ "notDataActions": []
3264
+ }
3265
+ ],
3266
+ "roleName": "Container Apps Operator",
3267
+ "roleType": "BuiltInRole",
3268
+ "type": "Microsoft.Authorization/roleDefinitions"
3269
+}
3270
+```
3271
+
3272
+## Container Apps SessionPools Contributor
3273
+
3274
+Full management of Container Apps SessionPools, including creation, deletion, and updates.
3275
+
3276
+> [!div class="mx-tableFixed"]
3277
+> | Actions | Description |
3278
+> | --- | --- |
3279
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
3280
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
3281
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/sessionPools/*/read | |
3282
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/sessionPools/*/write | |
3283
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/sessionPools/*/delete | |
3284
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/sessionPools/*/action | |
3285
+> | [microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/read | Get a Managed Environment |
3286
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/*/read | |
3287
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/join/action | Allows to create a Container App in a Managed Environment |
3288
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/managedEnvironments/checknameavailability/action | Check reource name availability for a Managed Environment |
3289
+> | [microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/read | Get a Connected Environment |
3290
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/*/read | |
3291
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/join/action | Allows to create a Container App or Container Apps Job in a Connected Environment |
3292
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/connectedEnvironments/checknameavailability/action | Check reource name availability for a Connected Environment |
3293
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
3294
+> | **NotActions** | |
3295
+> | *none* | |
3296
+> | **DataActions** | |
3297
+> | *none* | |
3298
+> | **NotDataActions** | |
3299
+> | *none* | |
3300
+
3301
+```json
3302
+{
3303
+ "assignableScopes": [
3304
+ "/"
3305
+ ],
3306
+ "description": "Full management of Container Apps SessionPools, including creation, deletion, and updates.",
3307
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/f7669afb-68b2-44b4-9c5f-6d2a47fddda0",
3308
+ "name": "f7669afb-68b2-44b4-9c5f-6d2a47fddda0",
3309
+ "permissions": [
3310
+ {
3311
+ "actions": [
3312
+ "Microsoft.Authorization/*/read",
3313
+ "Microsoft.Insights/alertRules/*",
3314
+ "Microsoft.App/sessionPools/*/read",
3315
+ "Microsoft.App/sessionPools/*/write",
3316
+ "Microsoft.App/sessionPools/*/delete",
3317
+ "Microsoft.App/sessionPools/*/action",
3318
+ "microsoft.App/managedEnvironments/read",
3319
+ "Microsoft.App/managedEnvironments/*/read",
3320
+ "Microsoft.App/managedEnvironments/join/action",
3321
+ "Microsoft.App/managedEnvironments/checknameavailability/action",
3322
+ "microsoft.App/connectedEnvironments/read",
3323
+ "Microsoft.App/connectedEnvironments/*/read",
3324
+ "Microsoft.App/connectedEnvironments/join/action",
3325
+ "Microsoft.App/connectedEnvironments/checknameavailability/action",
3326
+ "Microsoft.Resources/deployments/*"
3327
+ ],
3328
+ "notActions": [],
3329
+ "dataActions": [],
3330
+ "notDataActions": []
3331
+ }
3332
+ ],
3333
+ "roleName": "Container Apps SessionPools Contributor",
3334
+ "roleType": "BuiltInRole",
3335
+ "type": "Microsoft.Authorization/roleDefinitions"
3336
+}
3337
+```
3338
+
3339
+## Container Apps SessionPools Reader
3340
+
3341
+Read access to ContainerApps sessionpools.
3342
+
3343
+> [!div class="mx-tableFixed"]
3344
+> | Actions | Description |
3345
+> | --- | --- |
3346
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
3347
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
3348
+> | [Microsoft.App](../permissions/compute.md#microsoftapp)/sessionPools/*/read | |
3349
+> | **NotActions** | |
3350
+> | *none* | |
3351
+> | **DataActions** | |
3352
+> | *none* | |
3353
+> | **NotDataActions** | |
3354
+> | *none* | |
3355
+
3356
+```json
3357
+{
3358
+ "assignableScopes": [
3359
+ "/"
3360
+ ],
3361
+ "description": "Read access to ContainerApps sessionpools.",
3362
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/af61e8fc-2633-4b95-bed3-421ad6826515",
3363
+ "name": "af61e8fc-2633-4b95-bed3-421ad6826515",
3364
+ "permissions": [
3365
+ {
3366
+ "actions": [
3367
+ "Microsoft.Authorization/*/read",
3368
+ "Microsoft.Insights/alertRules/*",
3369
+ "Microsoft.App/sessionPools/*/read"
3370
+ ],
3371
+ "notActions": [],
3372
+ "dataActions": [],
3373
+ "notDataActions": []
3374
+ }
3375
+ ],
3376
+ "roleName": "Container Apps SessionPools Reader",
3377
+ "roleType": "BuiltInRole",
3378
+ "type": "Microsoft.Authorization/roleDefinitions"
3379
+}
3380
+```
3381
+
27633382
## Container Registry Cache Rule Administrator
27643383
27653384
Create, Read, Update, and Delete Cache Rules in Container Registry. This role doesn't grant permissions to manage Credential Sets.
⋯ 1048 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.