Azure built-in roles · databases
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 559beb9 · +45 −0 lines · also on GitHub
⋯ 597 unchanged lines
598598
}
599599
```
600600
601
+## Semantic Reranker User
602
+
603
+Execute semantic reranking operations against registered inference accounts. This role should be assigned to users who need to run semantic reranking workloads but do not need to manage the accounts themselves.
604
+
605
+> [!div class="mx-tableFixed"]
606
+> | Actions | Description |
607
+> | --- | --- |
608
+> | [Microsoft.InferenceService](../permissions/databases.md#microsoftinferenceservice)/inferenceAccounts/read | Reads an inference service. |
609
+> | **NotActions** | |
610
+> | [Microsoft.InferenceService](../permissions/databases.md#microsoftinferenceservice)/inferenceAccounts/write | Creates or updates an inference service. |
611
+> | [Microsoft.InferenceService](../permissions/databases.md#microsoftinferenceservice)/inferenceAccounts/delete | Deletes an inference service. |
612
+> | **DataActions** | |
613
+> | [Microsoft.InferenceService](../permissions/databases.md#microsoftinferenceservice)/inferenceAccounts/invoke/semanticReranker/action | Invokes the semantic reranker on an inference account. |
614
+> | **NotDataActions** | |
615
+> | *none* | |
616
+
617
+```json
618
+{
619
+ "assignableScopes": [
620
+ "/"
621
+ ],
622
+ "description": "Execute semantic reranking operations against registered inference accounts. This role should be assigned to users who need to run semantic reranking workloads but do not need to manage the accounts themselves.",
623
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/6c74a7c5-4a87-40f9-bb03-61e49aecbc78",
624
+ "name": "6c74a7c5-4a87-40f9-bb03-61e49aecbc78",
625
+ "permissions": [
626
+ {
627
+ "actions": [
628
+ "Microsoft.InferenceService/inferenceAccounts/read"
629
+ ],
630
+ "notActions": [
631
+ "Microsoft.InferenceService/inferenceAccounts/write",
632
+ "Microsoft.InferenceService/inferenceAccounts/delete"
633
+ ],
634
+ "dataActions": [
635
+ "Microsoft.InferenceService/inferenceAccounts/invoke/semanticReranker/action"
636
+ ],
637
+ "notDataActions": []
638
+ }
639
+ ],
640
+ "roleName": "Semantic Reranker User",
641
+ "roleType": "BuiltInRole",
642
+ "type": "Microsoft.Authorization/roleDefinitions"
643
+}
644
+```
645
+
601646
## SQL DB Contributor
602647
603648
Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers.
⋯ 484 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.