Azure built-in roles · databases
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 906fd2a · +7 −5 lines · also on GitHub
⋯ 6 unchanged lines
77
author: rolyon
88
manager: pmwongera
99
ms.author: rolyon
10
−ms.date: 05/25/2025
10
+ms.date: 12/31/2025
1111
ms.custom: generated
1212
---
1313
⋯ 116 unchanged lines
130130
> | [Microsoft.Support](../permissions/general.md#microsoftsupport)/* | Create and update a support ticket |
131131
> | [Microsoft.Network](../permissions/networking.md#microsoftnetwork)/virtualNetworks/subnets/joinViaServiceEndpoint/action | Joins resource such as storage account or SQL database to a subnet. Not alertable. |
132132
> | **NotActions** | |
133
+> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/copyJobs/* | |
133134
> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/dataTransferJobs/* | |
134135
> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/readonlyKeys/* | |
135136
> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/regenerateKey/* | |
⋯ 33 unchanged lines
169170
"Microsoft.Network/virtualNetworks/subnets/joinViaServiceEndpoint/action"
170171
],
171172
"notActions": [
173
+ "Microsoft.DocumentDB/databaseAccounts/copyJobs/*",
172174
"Microsoft.DocumentDB/databaseAccounts/dataTransferJobs/*",
173175
"Microsoft.DocumentDB/databaseAccounts/readonlyKeys/*",
174176
"Microsoft.DocumentDB/databaseAccounts/regenerateKey/*",
⋯ 27 unchanged lines
202204
> [!div class="mx-tableFixed"]
203205
> | Actions | Description |
204206
> | --- | --- |
205
−> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/backup/action | Submit a request to configure backup |
206
−> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/restore/action | Submit a restore request |
207
+> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/backup/action | Submit a request to trigger external backup operation |
208
+> | [Microsoft.DocumentDB](../permissions/databases.md#microsoftdocumentdb)/databaseAccounts/restore/action | Submit a request to trigger external restore operation |
207209
> | **NotActions** | |
208210
> | *none* | |
209211
> | **DataActions** | |
⋯ 451 unchanged lines
661663
> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/advancedThreatProtectionSettings/read | Retrieve a list of server Advanced Threat Protection settings configured for a given server |
662664
> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/advancedThreatProtectionSettings/write | Change the server Advanced Threat Protection settings for a given server |
663665
> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/auditingSettings/* | Create and manage SQL server auditing setting |
664
−> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/extendedAuditingSettings/read | Retrieve details of the extended server blob auditing policy configured on a given server |
666
+> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/extendedAuditingSettings/* | |
665667
> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/databases/advancedThreatProtectionSettings/read | Retrieve a list of database Advanced Threat Protection settings configured for a given database |
666668
> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/databases/advancedThreatProtectionSettings/write | Change the database Advanced Threat Protection settings for a given database |
667669
> | [Microsoft.Sql](../permissions/databases.md#microsoftsql)/servers/databases/advancedThreatProtectionSettings/read | Retrieve a list of database Advanced Threat Protection settings configured for a given database |
⋯ 84 unchanged lines
752754
"Microsoft.Sql/servers/advancedThreatProtectionSettings/read",
753755
"Microsoft.Sql/servers/advancedThreatProtectionSettings/write",
754756
"Microsoft.Sql/servers/auditingSettings/*",
755
− "Microsoft.Sql/servers/extendedAuditingSettings/read",
757
+ "Microsoft.Sql/servers/extendedAuditingSettings/*",
756758
"Microsoft.Sql/servers/databases/advancedThreatProtectionSettings/read",
757759
"Microsoft.Sql/servers/databases/advancedThreatProtectionSettings/write",
758760
"Microsoft.Sql/servers/databases/advancedThreatProtectionSettings/read",
⋯ 171 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.