Azure built-in roles · containers
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit c8e6cc6 · +47 −0 lines · also on GitHub
⋯ 3428 unchanged lines
34293429
}
34303430
```
34313431
3432
+## Container Instances Contributor
3433
+
3434
+Full management of Container Instance Container Groups, including creation, deletion, updates, start/stop, and debugging operations.
3435
+
3436
+> [!div class="mx-tableFixed"]
3437
+> | Actions | Description |
3438
+> | --- | --- |
3439
+> | [Microsoft.ContainerInstance](../permissions/containers.md#microsoftcontainerinstance)/containerGroups/* | Create and manage a container groups. |
3440
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
3441
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
3442
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
3443
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
3444
+> | **NotActions** | |
3445
+> | *none* | |
3446
+> | **DataActions** | |
3447
+> | *none* | |
3448
+> | **NotDataActions** | |
3449
+> | *none* | |
3450
+
3451
+```json
3452
+{
3453
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/5d977122-f97e-4b4d-a52f-6b43003ddb4d",
3454
+ "properties": {
3455
+ "roleName": "Azure Container Instances Contributor Role",
3456
+ "description": "Grants read/write access to container groups provided by Azure Container Instances",
3457
+ "assignableScopes": [
3458
+ "/"
3459
+ ],
3460
+ "permissions": [
3461
+ {
3462
+ "actions": [
3463
+ "Microsoft.ContainerInstance/containerGroups/*",
3464
+ "Microsoft.Resources/deployments/*",
3465
+ "Microsoft.Authorization/*/read",
3466
+ "Microsoft.Insights/alertRules/*",
3467
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
3468
+ ],
3469
+ "notActions": [],
3470
+ "dataActions": [],
3471
+ "notDataActions": []
3472
+ }
3473
+ ]
3474
+ }
3475
+}
3476
+```
3477
+
3478
+
34323479
## Container Registry Cache Rule Administrator
34333480
34343481
Create, Read, Update, and Delete Cache Rules in Container Registry. This role doesn't grant permissions to manage Credential Sets.
⋯ 1048 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.