Azure built-in roles · hybrid multicloud
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 440a9e3 · +58 −1 lines · also on GitHub
⋯ 6 unchanged lines
77
author: rolyon
88
manager: pmwongera
99
ms.author: rolyon
10
−ms.date: 05/25/2025
10
+ms.date: 09/24/2025
1111
ms.custom: generated
1212
---
1313
⋯ 1 unchanged line
1515
1616
This article lists the Azure built-in roles in the Hybrid + multicloud category (Azure Stack HCI).
1717
18
+
19
+## Arc Gateway Manager
20
+
21
+Manage Arc Gateway Resources
22
+
23
+[Learn more](/azure/azure-arc/servers/arc-gateway)
24
+
25
+> [!div class="mx-tableFixed"]
26
+> | Actions | Description |
27
+> | --- | --- |
28
+> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/settings/write | Writes an Azure Arc settings |
29
+> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/settings/read | Reads any Azure Arc settings |
30
+> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/gateways/read | Reads any Azure Arc gateways |
31
+> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/gateways/write | Writes an Azure Arc gateways |
32
+> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/gateways/delete | Deletes an Azure Arc gateways |
33
+> | [Microsoft.Authorization](../permissions/management-and-governance.md#microsoftauthorization)/*/read | Read roles and role assignments |
34
+> | [Microsoft.Insights](../permissions/monitor.md#microsoftinsights)/alertRules/* | Create and manage a classic metric alert |
35
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/deployments/* | Create and manage a deployment |
36
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
37
+> | **NotActions** | |
38
+> | *none* | |
39
+> | **DataActions** | |
40
+> | *none* | |
41
+> | **NotDataActions** | |
42
+> | *none* | |
43
+
44
+```json
45
+{
46
+ "assignableScopes": [
47
+ "/"
48
+ ],
49
+ "description": "Manage Arc Gateway Resources",
50
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/f6e92014-8af2-414d-9948-9b1abf559285",
51
+ "name": "f6e92014-8af2-414d-9948-9b1abf559285",
52
+ "permissions": [
53
+ {
54
+ "actions": [
55
+ "Microsoft.HybridCompute/settings/write",
56
+ "Microsoft.HybridCompute/settings/read",
57
+ "Microsoft.HybridCompute/gateways/read",
58
+ "Microsoft.HybridCompute/gateways/write",
59
+ "Microsoft.HybridCompute/gateways/delete",
60
+ "Microsoft.Authorization/*/read",
61
+ "Microsoft.Insights/alertRules/*",
62
+ "Microsoft.Resources/deployments/*",
63
+ "Microsoft.Resources/subscriptions/resourceGroups/read"
64
+ ],
65
+ "notActions": [],
66
+ "dataActions": [],
67
+ "notDataActions": []
68
+ }
69
+ ],
70
+ "roleName": "Arc Gateway Manager",
71
+ "roleType": "BuiltInRole",
72
+ "type": "Microsoft.Authorization/roleDefinitions"
73
+}
74
+```
1875
1976
## Azure Arc ScVmm Administrator role
2077
⋯ 1438 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 09:55 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.