Azure built-in roles · containers
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 53a535a · +80 −0 lines · also on GitHub
⋯ 1905 unchanged lines
19061906
}
19071907
```
19081908
1909
+## Azure Kubernetes Service Namespace Contributor
1910
+
1911
+Allows users to create and manage Azure Kubernetes Service namespace resources.
1912
+
1913
+> [!div class="mx-tableFixed"]
1914
+> | Actions | Description |
1915
+> | --- | --- |
1916
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
1917
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
1918
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
1919
+> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/managedClusters/managedNamespaces/* | Create and manage namespaces |
1920
+> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/managedClusters/apps/deployments/* | |
1921
+> | **NotActions** | |
1922
+> | *none* | |
1923
+> | **DataActions** | |
1924
+> | *none* | |
1925
+> | **NotDataActions** | |
1926
+> | *none* | Writes resourcequotas |
1927
+
1928
+```json
1929
+{
1930
+ "Name": "Azure Kubernetes Service Namespace Contributor",
1931
+ "Id": "289d8817-ee69-43f1-a0af-43a45505b488",
1932
+ "IsCustom": false,
1933
+ "Description": "Allows users to create and manage Azure Kubernetes Service namespace resources.",
1934
+ "Actions": [
1935
+ "Microsoft.Authorization/*/read",
1936
+ "Microsoft.Insights/alertRules/*",
1937
+ "Microsoft.Resources/subscriptions/resourceGroups/read",
1938
+ "Microsoft.ContainerService/managedClusters/managedNamespaces/*",
1939
+ "Microsoft.Resources/deployments/*"
1940
+ ],
1941
+ "NotActions": [],
1942
+ "DataActions": [],
1943
+ "NotDataActions": [],
1944
+ "AssignableScopes": [
1945
+ "/"
1946
+ ],
1947
+ "Condition": null,
1948
+ "ConditionVersion": null
1949
+}
1950
+```
1951
+
1952
+## Azure Kubernetes Service Namespace User
1953
+
1954
+Allows users to read Azure Kubernetes Service namespace resources. In-cluster namespace access further requires assignment of Azure Kubernetes Service RBAC roles to the namespace resource for an Entra ID enabled cluster.
1955
+
1956
+> [!div class="mx-tableFixed"]
1957
+> | Actions | Description |
1958
+> | --- | --- |
1959
+> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/managedClusters/managedNamespaces/read | Reads namespaces |
1960
+> | [Microsoft.ContainerService](../permissions/containers.md#microsoftcontainerservice)/managedClusters/managedNamespaces/listCredential/action | List credentials for the given namespace |
1961
+> | **NotActions** | |
1962
+> | *none* | |
1963
+> | **DataActions** | |
1964
+> | *none* | |
1965
+> | **NotDataActions** | |
1966
+> | *none* | Writes resourcequotas |
1967
+
1968
+```json
1969
+{
1970
+ "Name": "Azure Kubernetes Service Namespace User",
1971
+ "Id": "c9f76ca8-b262-4b10-8ed2-09cf0948aa35",
1972
+ "IsCustom": false,
1973
+ "Description": "Allows users to read Azure Kubernetes Service namespace resources. In-cluster namespace access further requires assignment of Azure Kubernetes Service RBAC roles to the namespace resource for an Entra ID enabled cluster.",
1974
+ "Actions": [
1975
+ "Microsoft.ContainerService/managedClusters/managedNamespaces/read",
1976
+ "Microsoft.ContainerService/managedClusters/managedNamespaces/listCredential/action"
1977
+ ],
1978
+ "NotActions": [],
1979
+ "DataActions": [],
1980
+ "NotDataActions": [],
1981
+ "AssignableScopes": [
1982
+ "/"
1983
+ ],
1984
+ "Condition": null,
1985
+ "ConditionVersion": null
1986
+}
1987
+```
1988
+
19091989
## Azure Kubernetes Service RBAC Admin
19101990
19111991
Lets you manage all resources under cluster/namespace, except update or delete resource quotas and namespaces.
⋯ 2617 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.