Azure built-in roles · integration

This page's changes and edits · All guidance changes

Microsoft's edit · 2 Jan 21:00 UTC

Storage Actions Blob Data Operator role

Microsoft's commit message in MicrosoftDocs/azure-docs · commit 2e02f2d · +0 ~~−55~~ lines · also on GitHub

⋯ 3049 unchanged lines

30503050 }

30513051 ```

30523052

3053 −## Migrate Arc Discovery Reader - Preview

3054 −

3055 −Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.

3056 −

3057 −[Learn more](/azure/migrate/concepts-arc-resource-discovery)

3058 −

3059 −> [!div class="mx-tableFixed"]

3060 −> | Actions | Description |

3061 −> | --- | --- |

3062 −> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |

3063 −> | Microsoft.AzureArcData/sqlServerInstances/read | Retrieves a SQL Server Instance resource |

3064 −> | Microsoft.AzureArcData/sqlServerInstances/databases/read | read databases |

3065 −> | Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read | read availabilityGroups |

3066 −> | Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action | Retrieves SQL Server instance telemetry |

3067 −> | Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action | Retrieves detailed properties of the Availability Group. |

3068 −> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/machines/read | Read any Azure Arc machines |

3069 −> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/machines/extensions/read | Reads any Azure Arc extensions |

3070 −> | **NotActions** | |

3071 −> | *none* | |

3072 −> | **DataActions** | |

3073 −> | *none* | |

3074 −> | **NotDataActions** | |

3075 −> | *none* | |

3076 −

3077 −```json

3078 −{

3079 − "assignableScopes": [

3080 − "/"

3081 − ],

3082 − "description": "Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.",

3083 − "id": "/providers/Microsoft.Authorization/roleDefinitions/5d5dddae-e124-4753-972d-aae60b37deb4",

3084 − "name": "5d5dddae-e124-4753-972d-aae60b37deb4",

3085 − "permissions": [

3086 − {

3087 − "actions": [

3088 − "Microsoft.Resources/subscriptions/resourceGroups/read",

3089 − "Microsoft.AzureArcData/sqlServerInstances/read",

3090 − "Microsoft.AzureArcData/sqlServerInstances/databases/read",

3091 − "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read",

3092 − "Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action",

3093 − "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action",

3094 − "Microsoft.HybridCompute/machines/read",

3095 − "Microsoft.HybridCompute/machines/extensions/read"

3096 − ],

3097 − "notActions": [],

3098 − "dataActions": [],

3099 − "notDataActions": []

3100 − }

3101 − ],

3102 − "roleName": "Migrate Arc Discovery Reader - Preview",

3103 − "roleType": "BuiltInRole",

3104 − "type": "Microsoft.Authorization/roleDefinitions"

3105 −}

3106 −```

3107 −

31083053 ## Scheduler Job Collections Contributor

31093054

31103055 Lets you manage Scheduler job collections, but not access to them.

⋯ 108 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 08:30 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.