Azure built-in roles · databases
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 36027ef · +45 −0 lines · also on GitHub
⋯ 565 unchanged lines
566566
}
567567
```
568568
569
+## Semantic Reranker User
570
+
571
+Execute semantic reranking operations against registered inference accounts. This role should be assigned to users who need to run semantic reranking workloads but do not need to manage the accounts themselves.
572
+
573
+> [!div class="mx-tableFixed"]
574
+> | Actions | Description |
575
+> | --- | --- |
576
+> | [Microsoft.InferenceService](../permissions/databases.md#microsoftinferenceservice)/inferenceAccounts/read | Reads an inference service. |
577
+> | **NotActions** | |
578
+> | [Microsoft.InferenceService](../permissions/databases.md#microsoftinferenceservice)/inferenceAccounts/write | Creates or updates an inference service. |
579
+> | [Microsoft.InferenceService](../permissions/databases.md#microsoftinferenceservice)/inferenceAccounts/delete | Deletes an inference service. |
580
+> | **DataActions** | |
581
+> | [Microsoft.InferenceService](../permissions/databases.md#microsoftinferenceservice)/inferenceAccounts/invoke/semanticReranker/action | Invokes the semantic reranker on an inference account. |
582
+> | **NotDataActions** | |
583
+> | *none* | |
584
+
585
+```json
586
+{
587
+ "assignableScopes": [
588
+ "/"
589
+ ],
590
+ "description": "Execute semantic reranking operations against registered inference accounts. This role should be assigned to users who need to run semantic reranking workloads but do not need to manage the accounts themselves.",
591
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/6c74a7c5-4a87-40f9-bb03-61e49aecbc78",
592
+ "name": "6c74a7c5-4a87-40f9-bb03-61e49aecbc78",
593
+ "permissions": [
594
+ {
595
+ "actions": [
596
+ "Microsoft.InferenceService/inferenceAccounts/read"
597
+ ],
598
+ "notActions": [
599
+ "Microsoft.InferenceService/inferenceAccounts/write",
600
+ "Microsoft.InferenceService/inferenceAccounts/delete"
601
+ ],
602
+ "dataActions": [
603
+ "Microsoft.InferenceService/inferenceAccounts/invoke/semanticReranker/action"
604
+ ],
605
+ "notDataActions": []
606
+ }
607
+ ],
608
+ "roleName": "Semantic Reranker User",
609
+ "roleType": "BuiltInRole",
610
+ "type": "Microsoft.Authorization/roleDefinitions"
611
+}
612
+```
613
+
569614
## SQL DB Contributor
570615
571616
Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers.
⋯ 484 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.