Azure built-in roles · containers
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 60bbf1b · +54 −4 lines · also on GitHub
⋯ 3 unchanged lines
44
ms.service: role-based-access-control
55
ms.topic: generated-reference
66
ms.workload: identity
7
−author: rolyon
8
−manager: femila
9
−ms.author: rolyon
10
−ms.date: 05/25/2025
7
+author: jenniferf-skc
8
+manager: pmwongera
9
+ms.author: jfields
10
+ms.date: 06/30/2025
1111
ms.custom: generated
1212
---
1313
⋯ 990 unchanged lines
10041004
}
10051005
],
10061006
"roleName": "Azure Kubernetes Fleet Manager Contributor Role",
1007
+ "roleType": "BuiltInRole",
1008
+ "type": "Microsoft.Authorization/roleDefinitions"
1009
+}
1010
+```
1011
+## Azure Kubernetes Fleet Manager Hub Agent Role
1012
+
1013
+Grants access to Azure resources needed by Azure Kubernetes Fleet Manager hub agents.
1014
+
1015
+> [!div class="mx-tableFixed"]
1016
+> | Actions | Description |
1017
+> | --- | --- |
1018
+> | [Microsoft.Network](../permissions/networking.md#microsoftnetwork)/publicIPAddresses/read | Gets a public IP address definition. |
1019
+> | [Microsoft.Network](../permissions/networking.md#microsoftnetwork)/trafficManagerProfiles/read | Get the Traffic Manager profile configuration. This includes DNS settings, traffic routing settings, endpoint monitoring settings, and the list of endpoints routed by this Traffic Manager profile. |
1020
+> | [Microsoft.Network](../permissions/networking.md#microsoftnetwork)/trafficManagerProfiles/write | Create a Traffic Manager profile, or modify the configuration of an existing Traffic Manager profile. This includes enabling or disabling a profile and modifying DNS settings, traffic routing settings, or endpoint monitoring settings. Endpoints routed by the Traffic Manager profile can be added, removed, enabled or disabled. |
1021
+> | [Microsoft.Network](../permissions/networking.md#microsoftnetwork)/trafficManagerProfiles/delete | Delete the Traffic Manager profile. All settings associated with the Traffic Manager profile will be lost, and the profile can no longer be used to route traffic. |
1022
+> | [Microsoft.Network](../permissions/networking.md#microsoftnetwork)/trafficManagerProfiles/azureEndpoints/read | Gets an Azure Endpoint which belongs to a Traffic Manager Profile, including all the properties of that Azure Endpoint. |
1023
+> | [Microsoft.Network](../permissions/networking.md#microsoftnetwork)/trafficManagerProfiles/azureEndpoints/write | Add a new Azure Endpoint in an existing Traffic Manager Profile or update the properties of an existing Azure Endpoint in that Traffic Manager Profile. |
1024
+> | [Microsoft.Network](../permissions/networking.md#microsoftnetwork)/trafficManagerProfiles/azureEndpoints/delete | Deletes an Azure Endpoint from an existing Traffic Manager Profile. Traffic Manager will stop routing traffic to the deleted Azure Endpoint. |
1025
+> | **NotActions** | |
1026
+> | *none* | |
1027
+> | **DataActions** | |
1028
+> | *none* | |
1029
+> | **NotDataActions** | |
1030
+> | *none* | |
1031
+
1032
+```json
1033
+{
1034
+ "assignableScopes": [
1035
+ "/"
1036
+ ],
1037
+ "description": "Grants access to Azure resources needed by Azure Kubernetes Fleet Manager hub agents.",
1038
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/de2b316d-7a2c-4143-b4cd-c148f6a355a1",
1039
+ "name": "de2b316d-7a2c-4143-b4cd-c148f6a355a1",
1040
+ "permissions": [
1041
+ {
1042
+ "actions": [
1043
+ "Microsoft.Network/publicIPAddresses/read",
1044
+ "Microsoft.Network/trafficManagerProfiles/read",
1045
+ "Microsoft.Network/trafficManagerProfiles/write",
1046
+ "Microsoft.Network/trafficManagerProfiles/delete",
1047
+ "Microsoft.Network/trafficManagerProfiles/azureEndpoints/read",
1048
+ "Microsoft.Network/trafficManagerProfiles/azureEndpoints/write",
1049
+ "Microsoft.Network/trafficManagerProfiles/azureEndpoints/delete"
1050
+ ],
1051
+ "notActions": [],
1052
+ "dataActions": [],
1053
+ "notDataActions": []
1054
+ }
1055
+ ],
1056
+ "roleName": "Azure Kubernetes Fleet Manager Hub Agent Role",
10071057
"roleType": "BuiltInRole",
10081058
"type": "Microsoft.Authorization/roleDefinitions"
10091059
}
⋯ 3423 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.