Azure built-in roles · databases
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 424eb4a · +110 −0 lines · also on GitHub
⋯ 58 unchanged lines
5959
}
6060
```
6161
62
+## Azure Managed Redis Contributor
63
+
64
+Lets you manage Azure Managed Redis resources, but not access the data stored in them.
65
+
66
+> [!div class="mx-tableFixed"]
67
+> | Actions | Description |
68
+> | --- | --- |
69
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
70
+> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/locations/operationsStatus/read | View the status of a long running operation for which the 'AzureAsync' header was previously returned to the client |
71
+> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/locations/checknameavailability/action | Checks if a name is available for use with a new Redis Enterprise cache |
72
+> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/operations/read | Lists the operations that 'Microsoft.Cache' provider supports. |
73
+> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redisEnterprise/* | |
74
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
75
+> | [Microsoft.ResourceHealth](../permissions/management-and-governance.md#microsoftresourcehealth)/availabilityStatuses/read | Gets the availability statuses for all resources in the specified scope |
76
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
77
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
78
+> | **NotActions** | |
79
+> | *none* | |
80
+> | **DataActions** | |
81
+> | *none* | |
82
+> | **NotDataActions** | |
83
+> | *none* | |
84
+
85
+```json
86
+{
87
+ "assignableScopes": [
88
+ "/"
89
+ ],
90
+ "description": "Lets you manage Azure Managed Redis resources, but not access the data stored in them.",
91
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/3015e5ed-6856-4ab3-b2f0-b8492aa30ca6",
92
+ "name": "3015e5ed-6856-4ab3-b2f0-b8492aa30ca6",
93
+ "permissions": [
94
+ {
95
+ "actions": [
96
+ "Microsoft.Authorization/*/read",
97
+ "Microsoft.Cache/locations/operationsStatus/read",
98
+ "Microsoft.Cache/locations/checknameavailability/action",
99
+ "Microsoft.Cache/operations/read",
100
+ "Microsoft.Cache/redisEnterprise/*",
101
+ "Microsoft.Insights/alertRules/*",
102
+ "Microsoft.ResourceHealth/availabilityStatuses/read",
103
+ "Microsoft.Resources/deployments/*",
104
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
105
+ ],
106
+ "notActions": [],
107
+ "dataActions": [],
108
+ "notDataActions": []
109
+ }
110
+ ],
111
+ "roleName": "Azure Managed Redis Contributor",
112
+ "roleType": "BuiltInRole",
113
+ "type": "Microsoft.Authorization/roleDefinitions"
114
+}
115
+```
116
+
117
+## Azure Managed Redis Reader
118
+
119
+Lets you view Azure Managed Redis resources, but not modify them or access keys or access to the data stored in them.
120
+
121
+> [!div class="mx-tableFixed"]
122
+> | Actions | Description |
123
+> | --- | --- |
124
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
125
+> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/locations/operationsStatus/read | View the status of a long running operation for which the 'AzureAsync' header was previously returned to the client |
126
+> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/operations/read | Lists the operations that 'Microsoft.Cache' provider supports. |
127
+> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redisEnterprise/read | View the Redis Enterprise cache's settings and configuration in the management portal |
128
+> | [Microsoft.Cache](../permissions/databases.md#microsoftcache)/redisEnterprise/*/read | |
129
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/read | Read a classic metric alert |
130
+> | [Microsoft.ResourceHealth](../permissions/management-and-governance.md#microsoftresourcehealth)/availabilityStatuses/read | Gets the availability statuses for all resources in the specified scope |
131
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/read | Gets or lists deployments. |
132
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
133
+> | **NotActions** | |
134
+> | *none* | |
135
+> | **DataActions** | |
136
+> | *none* | |
137
+> | **NotDataActions** | |
138
+> | *none* | |
139
+
140
+```json
141
+{
142
+ "assignableScopes": [
143
+ "/"
144
+ ],
145
+ "description": "Lets you view Azure Managed Redis resources, but not modify them or access keys or access to the data stored in them.",
146
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/f287ba2f-f923-4464-a5bd-721c3951d32d",
147
+ "name": "f287ba2f-f923-4464-a5bd-721c3951d32d",
148
+ "permissions": [
149
+ {
150
+ "actions": [
151
+ "Microsoft.Authorization/*/read",
152
+ "Microsoft.Cache/locations/operationsStatus/read",
153
+ "Microsoft.Cache/operations/read",
154
+ "Microsoft.Cache/redisEnterprise/read",
155
+ "Microsoft.Cache/redisEnterprise/*/read",
156
+ "Microsoft.Insights/alertRules/read",
157
+ "Microsoft.ResourceHealth/availabilityStatuses/read",
158
+ "Microsoft.Resources/deployments/read",
159
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
160
+ ],
161
+ "notActions": [],
162
+ "dataActions": [],
163
+ "notDataActions": []
164
+ }
165
+ ],
166
+ "roleName": "Azure Managed Redis Reader",
167
+ "roleType": "BuiltInRole",
168
+ "type": "Microsoft.Authorization/roleDefinitions"
169
+}
170
+```
171
+
62172
## Cosmos DB Account Reader Role
63173
64174
Can read Azure Cosmos DB account data. See [DocumentDB Account Contributor](#documentdb-account-contributor) for managing Azure Cosmos DB accounts.
⋯ 881 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.