Azure built-in roles · containers
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit a3711c8 · +47 −1 lines · also on GitHub
⋯ 6 unchanged lines
77
author: jenniferf-skc
88
manager: pmwongera
99
ms.author: jfields
10
−ms.date: 06/30/2025
10
+ms.date: 09/03/2025
1111
ms.custom: generated
1212
---
1313
⋯ 708 unchanged lines
722722
}
723723
],
724724
"roleName": "Azure Arc Kubernetes Writer",
725
+ "roleType": "BuiltInRole",
726
+ "type": "Microsoft.Authorization/roleDefinitions"
727
+}
728
+```
729
+## Azure Container Instances Contributor Role
730
+
731
+Grants read/write access to container groups provided by Azure Container Instances
732
+
733
+> [!div class="mx-tableFixed"]
734
+> | Actions | Description |
735
+> | --- | --- |
736
+> | [Microsoft.ContainerInstance](../permissions/containers.md#microsoftcontainerinstance)/containerGroups/* | Create and manage container groups |
737
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
738
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
739
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
740
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
741
+> | **NotActions** | |
742
+> | *none* | |
743
+> | **DataActions** | |
744
+> | *none* | |
745
+> | **NotDataActions** | |
746
+> | *none* | |
747
+
748
+```json
749
+{
750
+ "assignableScopes": [
751
+ "/"
752
+ ],
753
+ "description": "Grants read/write access to container groups provided by Azure Container Instances",
754
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/5d977122-f97e-4b4d-a52f-6b43003ddb4d",
755
+ "name": "5d977122-f97e-4b4d-a52f-6b43003ddb4d",
756
+ "permissions": [
757
+ {
758
+ "actions": [
759
+ "Microsoft.ContainerInstance/containerGroups/*",
760
+ "Microsoft.Resources/deployments/*",
761
+ "Microsoft.Authorization/*/read",
762
+ "Microsoft.Insights/alertRules/*",
763
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
764
+ ],
765
+ "notActions": [],
766
+ "dataActions": [],
767
+ "notDataActions": []
768
+ }
769
+ ],
770
+ "roleName": "Azure Container Instances Contributor Role",
725771
"roleType": "BuiltInRole",
726772
"type": "Microsoft.Authorization/roleDefinitions"
727773
}
⋯ 3802 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.