Azure built-in roles · containers

This page's changes and edits · All guidance changes

Microsoft's edit · 4 Sep 2025 14:14 UTC

Removing Container Instances Contributor entry

Microsoft's commit message in MicrosoftDocs/azure-docs · commit 6b0b369 · +0 ~~−47~~ lines · also on GitHub

⋯ 3474 unchanged lines

34753475 }

34763476 ```

34773477

3478 −## Container Instances Contributor

3479 −

3480 −Full management of Container Instance Container Groups, including creation, deletion, updates, start/stop, and debugging operations.

3481 −

3482 −> [!div class="mx-tableFixed"]

3483 −> | Actions | Description |

3484 −> | --- | --- |

3485 −> | [Microsoft.ContainerInstance](../permissions/containers.md#microsoftcontainerinstance)/containerGroups/* | Create and manage a container groups. |

3486 −> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |

3487 −> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |

3488 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |

3489 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |

3490 −> | **NotActions** | |

3491 −> | *none* | |

3492 −> | **DataActions** | |

3493 −> | *none* | |

3494 −> | **NotDataActions** | |

3495 −> | *none* | |

3496 −

3497 −```json

3498 −{

3499 − "id": "/providers/Microsoft.Authorization/roleDefinitions/5d977122-f97e-4b4d-a52f-6b43003ddb4d",

3500 − "properties": {

3501 − "roleName": "Azure Container Instances Contributor Role",

3502 − "description": "Grants read/write access to container groups provided by Azure Container Instances",

3503 − "assignableScopes": [

3504 − "/"

3505 − ],

3506 − "permissions": [

3507 − {

3508 − "actions": [

3509 − "Microsoft.ContainerInstance/containerGroups/*",

3510 − "Microsoft.Resources/deployments/*",

3511 − "Microsoft.Authorization/*/read",

3512 − "Microsoft.Insights/alertRules/*",

3513 − "Microsoft.Resources/subscriptions/resourceGroups/read"

3514 − ],

3515 − "notActions": [],

3516 − "dataActions": [],

3517 − "notDataActions": []

3518 − }

3519 − ]

3520 − }

3521 −}

3522 −```

3523 −

3524 −

35253478 ## Container Registry Cache Rule Administrator

35263479

35273480 Create, Read, Update, and Delete Cache Rules in Container Registry. This role doesn't grant permissions to manage Credential Sets.

⋯ 1048 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.