Azure built-in roles · migration
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 2e02f2d · +55 −0 lines · also on GitHub
⋯ 573 unchanged lines
574574
}
575575
```
576576
577
+## Migrate Arc Discovery Reader - Preview
578
+
579
+Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.
580
+
581
+[Learn more](/azure/migrate/concepts-arc-resource-discovery)
582
+
583
+> [!div class="mx-tableFixed"]
584
+> | Actions | Description |
585
+> | --- | --- |
586
+> | [Microsoft.Resources](../permissions/management-and-governance.md#microsoftresources)/subscriptions/resourceGroups/read | Gets or lists resource groups. |
587
+> | Microsoft.AzureArcData/sqlServerInstances/read | Retrieves a SQL Server Instance resource |
588
+> | Microsoft.AzureArcData/sqlServerInstances/databases/read | read databases |
589
+> | Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read | read availabilityGroups |
590
+> | Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action | Retrieves SQL Server instance telemetry |
591
+> | Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action | Retrieves detailed properties of the Availability Group. |
592
+> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/machines/read | Read any Azure Arc machines |
593
+> | [Microsoft.HybridCompute](../permissions/hybrid-multicloud.md#microsofthybridcompute)/machines/extensions/read | Reads any Azure Arc extensions |
594
+> | **NotActions** | |
595
+> | *none* | |
596
+> | **DataActions** | |
597
+> | *none* | |
598
+> | **NotDataActions** | |
599
+> | *none* | |
600
+
601
+```json
602
+{
603
+ "assignableScopes": [
604
+ "/"
605
+ ],
606
+ "description": "Read metadata of Azure Arc enabled server resources and metadata, performance and migration suitability of Arc enabled SQL server resources. Users creating Azure Migrate project that uses Arc resource discovery require this role on Arc scope of the project. To enable periodic sync, Azure Migrate project managed identity must be assigned this role. This role is in preview and subject to change.",
607
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/5d5dddae-e124-4753-972d-aae60b37deb4",
608
+ "name": "5d5dddae-e124-4753-972d-aae60b37deb4",
609
+ "permissions": [
610
+ {
611
+ "actions": [
612
+ "Microsoft.Resources/subscriptions/resourceGroups/read",
613
+ "Microsoft.AzureArcData/sqlServerInstances/read",
614
+ "Microsoft.AzureArcData/sqlServerInstances/databases/read",
615
+ "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/read",
616
+ "Microsoft.AzureArcData/sqlServerInstances/getTelemetry/action",
617
+ "Microsoft.AzureArcData/sqlServerInstances/availabilityGroups/getDetailView/action",
618
+ "Microsoft.HybridCompute/machines/read",
619
+ "Microsoft.HybridCompute/machines/extensions/read"
620
+ ],
621
+ "notActions": [],
622
+ "dataActions": [],
623
+ "notDataActions": []
624
+ }
625
+ ],
626
+ "roleName": "Migrate Arc Discovery Reader - Preview",
627
+ "roleType": "BuiltInRole",
628
+ "type": "Microsoft.Authorization/roleDefinitions"
629
+}
630
+```
631
+
577632
## Next steps
578633
579634
- [Assign Azure roles using the Azure portal](/azure/role-based-access-control/role-assignments-portal)
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 08:30 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.