ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 271/271 feeds/APIs · 464/464 docs · checked 09:33 UTC Customize Public modeDiscuss ChangeIntel on Discord

Azure built-in roles · hybrid multicloud

This page's changes and edits · All guidance changes

Microsoft's edit ·

Roles and permissions for April

Microsoft's commit message in MicrosoftDocs/azure-docs · commit 3ebaf28 · +73 −3 lines · also on GitHub

11 ---
2 −title: Azure built-in roles for Hybrid + multicloud - Azure RBAC
2 +title: Azure built-in roles for Hybrid + multicloud - Azure RBAC
33 description: This article lists the Azure built-in roles for Azure role-based access control (Azure RBAC) in the Hybrid + multicloud category (Azure Stack HCI). It lists Actions, NotActions, DataActions, and NotDataActions.
44 ms.service: role-based-access-control
55 ms.topic: reference
⋯ 1 unchanged line
77 author: rolyon
88 manager: femila
99 ms.author: rolyon
10 −ms.date: 01/25/2025
10 +ms.date: 04/25/2025
1111 ms.custom: generated
1212 ---
1313
⋯ 148 unchanged lines
162162 > | [Microsoft.Management](../permissions/management-and-governance.md#microsoftmanagement)/managementGroups/read | List management groups for the authenticated user. |
163163 > | [Microsoft.Support](../permissions/general.md#microsoftsupport)/* | Create and update a support ticket |
164164 > | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/* | |
165 +> | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/EdgeMachines/* | |
166 +> | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/DevicePools/* | |
165167 > | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/AlertRules/Write | Create or update a classic metric alert |
166168 > | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/AlertRules/Delete | Delete a classic metric alert |
167169 > | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/AlertRules/Read | Read a classic metric alert |
⋯ 110 unchanged lines
278280 "Microsoft.Management/managementGroups/read",
279281 "Microsoft.Support/*",
280282 "Microsoft.AzureStackHCI/*",
283 + "Microsoft.AzureStackHCI/EdgeMachines/*",
284 + "Microsoft.AzureStackHCI/DevicePools/*",
281285 "Microsoft.Insights/AlertRules/Write",
282286 "Microsoft.Insights/AlertRules/Delete",
283287 "Microsoft.Insights/AlertRules/Read",
⋯ 141 unchanged lines
425429 > | --- | --- |
426430 > | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/Clusters/* | |
427431 > | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/EdgeDevices/* | |
432 +> | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/DevicePools/*/read | |
433 +> | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/EdgeMachines/*/read | |
428434 > | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
435 +> | [Microsoft.HybridContainerService](../permissions/hybrid-multicloud.md#microsofthybridcontainerservice)/register/action | Register the subscription for Microsoft.HybridContainerService |
436 +> | [Microsoft.HybridContainerService](../permissions/hybrid-multicloud.md#microsofthybridcontainerservice)/kubernetesVersions/read | Lists the supported kubernetes versions from the underlying custom location |
437 +> | [Microsoft.HybridContainerService](../permissions/hybrid-multicloud.md#microsofthybridcontainerservice)/kubernetesVersions/write | Puts the kubernetes version resource type |
438 +> | [Microsoft.HybridContainerService](../permissions/hybrid-multicloud.md#microsofthybridcontainerservice)/skus/read | Lists the supported VM SKUs from the underlying custom location |
439 +> | [Microsoft.HybridContainerService](../permissions/hybrid-multicloud.md#microsofthybridcontainerservice)/skus/write | Puts the VM SKUs resource type |
440 +> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/roleassignments/read | Get information about a role assignment. |
441 +> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
442 +> | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/StorageContainers/Write | Creates/Updates storage containers resource |
443 +> | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/StorageContainers/Read | Gets/Lists storage containers resource |
444 +> | [Microsoft.AzureStackHCI](../permissions/hybrid-multicloud.md#microsoftazurestackhci)/Register/Action | Registers the subscription for the Azure Local resource provider and enables the creation of Azure Local resources. |
445 +> | [Microsoft.GuestConfiguration](../permissions/management-and-governance.md#microsoftguestconfiguration)/guestConfigurationAssignments/read | Get guest configuration assignment. |
446 +> | [Microsoft.KubernetesConfiguration](../permissions/hybrid-multicloud.md#microsoftkubernetesconfiguration)/extensions/write | Creates or updates extension resource. |
447 +> | [Microsoft.KubernetesConfiguration](../permissions/hybrid-multicloud.md#microsoftkubernetesconfiguration)/extensions/read | Gets extension instance resource. |
448 +> | [Microsoft.KubernetesConfiguration](../permissions/hybrid-multicloud.md#microsoftkubernetesconfiguration)/extensions/delete | Deletes extension instance resource. |
449 +> | [Microsoft.KubernetesConfiguration](../permissions/hybrid-multicloud.md#microsoftkubernetesconfiguration)/extensions/operations/read | Gets Async Operation status. |
450 +> | [Microsoft.KubernetesConfiguration](../permissions/hybrid-multicloud.md#microsoftkubernetesconfiguration)/namespaces/read | Get Namespace Resource |
451 +> | [Microsoft.KubernetesConfiguration](../permissions/hybrid-multicloud.md#microsoftkubernetesconfiguration)/operations/read | Gets available operations of the Microsoft.KubernetesConfiguration resource provider. |
452 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/appliances/read | Gets an Appliance resource |
453 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/appliances/write | Creates or Updates Appliance resource |
454 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/appliances/delete | Deletes Appliance resource |
455 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/locations/operationresults/read | Get result of Appliance operation |
456 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/locations/operationsstatus/read | Get result of Appliance operation |
457 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/appliances/listClusterUserCredential/action | Get an appliance cluster user credential |
458 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/appliances/listKeys/action | Get an appliance cluster customer user keys |
459 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/appliances/upgradeGraphs/read | Gets the upgrade graph of Appliance cluster |
460 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/telemetryconfig/read | Get Appliances telemetry config utilized by Appliances CLI |
461 +> | [Microsoft.ResourceConnector](../permissions/hybrid-multicloud.md#microsoftresourceconnector)/operations/read | Gets list of Available Operations for Appliances |
462 +> | [Microsoft.ExtendedLocation](../permissions/hybrid-multicloud.md#microsoftextendedlocation)/customLocations/deploy/action | Deploy permissions to a Custom Location resource |
463 +> | [Microsoft.ExtendedLocation](../permissions/hybrid-multicloud.md#microsoftextendedlocation)/customLocations/read | Gets an Custom Location resource |
464 +> | [Microsoft.ExtendedLocation](../permissions/hybrid-multicloud.md#microsoftextendedlocation)/customLocations/write | Creates or Updates Custom Location resource |
465 +> | [Microsoft.ExtendedLocation](../permissions/hybrid-multicloud.md#microsoftextendedlocation)/customLocations/delete | Deletes Custom Location resource |
429466 > | **NotActions** | |
430467 > | *none* | |
431468 > | **DataActions** | |
⋯ 14 unchanged lines
446483 "actions": [
447484 "Microsoft.AzureStackHCI/Clusters/*",
448485 "Microsoft.AzureStackHCI/EdgeDevices/*",
449 − "Microsoft.Resources/subscriptions/resourceGroups/read"
486 + "Microsoft.AzureStackHCI/DevicePools/*/read",
487 + "Microsoft.AzureStackHCI/EdgeMachines/*/read",
488 + "Microsoft.Resources/subscriptions/resourceGroups/read",
489 + "Microsoft.HybridContainerService/register/action",
490 + "Microsoft.HybridContainerService/kubernetesVersions/read",
491 + "Microsoft.HybridContainerService/kubernetesVersions/write",
492 + "Microsoft.HybridContainerService/skus/read",
493 + "Microsoft.HybridContainerService/skus/write",
494 + "Microsoft.Authorization/roleassignments/read",
495 + "Microsoft.Resources/subscriptions/resourceGroups/read",
496 + "Microsoft.AzureStackHCI/StorageContainers/Write",
497 + "Microsoft.AzureStackHCI/StorageContainers/Read",
498 + "Microsoft.AzureStackHCI/Register/Action",
499 + "Microsoft.GuestConfiguration/guestConfigurationAssignments/read",
500 + "Microsoft.KubernetesConfiguration/extensions/write",
501 + "Microsoft.KubernetesConfiguration/extensions/read",
502 + "Microsoft.KubernetesConfiguration/extensions/delete",
503 + "Microsoft.KubernetesConfiguration/extensions/operations/read",
504 + "Microsoft.KubernetesConfiguration/namespaces/read",
505 + "Microsoft.KubernetesConfiguration/operations/read",
506 + "Microsoft.ResourceConnector/appliances/read",
507 + "Microsoft.ResourceConnector/appliances/write",
508 + "Microsoft.ResourceConnector/appliances/delete",
509 + "Microsoft.ResourceConnector/locations/operationresults/read",
510 + "Microsoft.ResourceConnector/locations/operationsstatus/read",
511 + "Microsoft.ResourceConnector/appliances/listClusterUserCredential/action",
512 + "Microsoft.ResourceConnector/appliances/listKeys/action",
513 + "Microsoft.ResourceConnector/appliances/upgradeGraphs/read",
514 + "Microsoft.ResourceConnector/telemetryconfig/read",
515 + "Microsoft.ResourceConnector/operations/read",
516 + "Microsoft.ExtendedLocation/customLocations/deploy/action",
517 + "Microsoft.ExtendedLocation/customLocations/read",
518 + "Microsoft.ExtendedLocation/customLocations/write",
519 + "Microsoft.ExtendedLocation/customLocations/delete"
450520 ],
451521 "notActions": [],
452522 "dataActions": [],
⋯ 412 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:55 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 23 Oct 09:33 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.